last executing test programs: 12.494813322s ago: executing program 0 (id=728): r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(0x3, 0xc0305602, 0x38) setsockopt$auto(r0, 0x0, 0x24, 0x0, 0x9) mmap$auto(0x20000000000000, 0x2000b, 0x7fff, 0x400001c, r0, 0x7ffe) ioperm$auto(0x7, 0x5ad2, 0x8) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xc, 0x9, 0x5, 0xeb1, 0x405, 0xb59b) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bluetooth/hci3/force_devcoredump\x00', 0x4880, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mincore$auto(0x1000, 0x8001, 0x0) r1 = fcntl$auto(0x8000000000000001, 0x7, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) pidfd_getfd$auto(r0, r1, 0x8001) fcntl$auto(0x8000000000000001, 0x26, 0x8) mincore$auto(0x7, 0xc, &(0x7f0000000000)='/dev/ptyd1\x00') 11.49709888s ago: executing program 0 (id=735): openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci6/msft_opcode\x00', 0x8040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_force_wakeup_fops_hci_vhci(r0, &(0x7f00000001c0)=""/228, 0xe4) socket(0x10, 0x2, 0x0) set_mempolicy$auto(0x5, &(0x7f0000000000)=0x9, 0x6) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) madvise$auto(0x8, 0xd6, 0x1) mlockall$auto(0x7) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) prctl$auto(0x1000000001c, 0x5, 0x0, 0x400000000009, 0x101) fcntl$auto(r2, 0x400, 0x1) setresuid$auto(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) close_range$auto(0x2, 0x8, 0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3) mmap$auto(0x0, 0xfffffffffffffffd, 0xdf, 0xeb1, r1, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xffffffffffffffff) signalfd$auto(0xffffffff, 0x0, 0x8) socket(0xa, 0x3, 0x3a) openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f00000000c0), 0x385103, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x27, 0x1, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r3) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00') 10.286683822s ago: executing program 0 (id=741): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0x2, 0x1) socket(0x15, 0xf, 0x0) io_uring_setup$auto(0x6, 0x0) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) exit$auto(0x7) ioctl$auto(0x3, 0xff08, 0x0) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01c729bd7005000200f70000000600f74d38417657d99a4941c30f020000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4040000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f00000000c0), 0x8) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/gss_krb5_enctypes\x00', 0x1c9180, 0x0) read$auto_tracing_stats_fops_trace(r5, 0x0, 0x0) capset$auto(&(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)={0x828, 0x5, 0x9}) r7 = socket(0x2, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r8}, 0x6a) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(&\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0800b200", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB], 0x2628}, 0x1, 0x0, 0x0, 0x40000}, 0x20000014) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000004c0), r9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'nicvf0\x00'}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c19ca4b", @ANYRES16=r3, @ANYBLOB="000227bd7000fddbdf250c0000004400018008000300650c00001400020068737230000000000000000000000000080003000800000008000300001000001400020064766d72703100000000000000000000f400038008002800ac141426080022800400ee8010005c800400d0800400438004004c80cd0083800400f7800800cf00", @ANYRES32=r5, @ANYBLOB="04002d80a5f18eea946c62c9b7ead77e2c2e4f2c1d2845e7d3e1efc7179e539ad096830371ed99e5d4585b7d88c8fbf03a853f9af72fb4ff0e7222a72ae2b9b2d8ec2c20e65553e823e9245bfddfdb5c1722951b7e855115e3686da097f04ae883d30c2ab2d5420f460e3f2a1f6cb9094563cc287a2b0f28f08ade283bf079dfa0102f3874c8ad90049efca9c2cae122fee541708d5a145cf1e3331d6340b059cb1499571a53baf4a2e4ced21906bd1a0c5cca598a08009800", @ANYRES32=r6, @ANYBLOB="0000000c00018008000100", @ANYRES16=r6, @ANYBLOB="30000180080003000400000014000200766972745f776966693000000000000008000100", @ANYRES32=r6, @ANYRES8, @ANYRES32=r10, @ANYRESHEX, @ANYBLOB="d93a6ac638674fbc6086df0e7aa3049fa1bb01ca83bb8b6b9a9c2473ae2ae7b1bddfe9f7a7d16d7112b24753322e46e915859ea9aa3f5653607c13257e16e8faefff183bf807eca3b7504e1904ac23cbaf5ce206abd741b5723dc77f2ca6895bc35aaea6fb50d5dbaff176cdee096cd6fbdeb1b9b4672e5e59dcbc8d9e2d8cc6242699fefa77bf46faef2cf219bf8422e9be1f2b1b20cd5626da41e32ad146ea1e1121a55f5037a2c31782be873fe045abd70996b64f9556119cf237204773c2c216c44ae72a3c071dd91efab75c4b380ab07cda150abc04aa60bf96a2ddd54c3142a56121ac661ae23e5c095dbb8afb694816bab240855cd4", @ANYBLOB], 0x194}, 0x1, 0x0, 0x0, 0x20000084}, 0x40400d5) 9.570829146s ago: executing program 0 (id=744): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r0, 0x0, 0x81) acct$auto(&(0x7f0000000000)='/dev/fb0\x00') recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers_autoprobe\x00', 0x141000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000500)=""/4096, 0x1000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x151001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)={0x30, r3, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r4 = pidfd_open$auto(0x1, 0x0) clock_getres$auto(0xfffffffffffffffb, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r5, &(0x7f0000000180), 0x0) setns(r4, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0) 8.549589361s ago: executing program 0 (id=747): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = clone$auto(0x32, 0xc3, &(0x7f0000000040)=0x7ff, &(0x7f0000000080)=0xf, 0x2) ioctl$auto(0x3, 0xae41, r1) r4 = ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) mmap$auto(0x0, 0x7fff, 0x3, 0xeb0, 0xfffffffffffffffa, 0x208000) syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'sit0\x00'}) r5 = socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) close_range$auto(0x2, r6, 0x0) r7 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r7, &(0x7f00000002c0)=""/190, 0xfffffe39) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7201", @ANYRESHEX], 0x1ac}}, 0x4004) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1, 0x8000000000e97f, 0x2, 0x1fd, 0x401, 0x80000000000008) sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r5, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x454, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x2ca, 0x19, 0x0, 0x1, [@generic="707148e18779206019a60a5af250d0f785ab2e8ccb92a1422b22d01079acd07f303bbadc0c54c44e399cffd7a746838e89edb5f0965f30ebea751a4d0c37321b09c3cdd1459cb68daaba1d541051c84f653b2f020957ebea18b8f486", @generic="e737649bdac79e8b8e8cf4d9449cbf32552bf379dbe3f20af19d2c1e0a630af949c960d15974205ba22da33b4558f174c4228279b9506a58f568e60561bfc651fa05205bf6ac3b7051e178bc3e07330fd7bd19e59651efc6e45eef5b21a0abaea1ca098ebdba2030e4b226fd0c3063c31ee63b357a103acdff258d11ca6684e7db92bcbb105d26eb738edd416ab167d60555b358e283d2dae7e7108ecfe60576e08d1075", @nested={0xb5, 0x39, 0x0, 0x1, [@typed={0x14, 0x5f, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="e18c22684d120d2a9de616823b7d81287beb1f69058dd8d35b4bc49635f8092801af7c7ecdf334f3510b9912c7f4fff62de0fd9439bc", @generic="892d557f66b4a1fb0b6b4900f48cf6b72c340e18d16a1425df0a723b257f9d544611ce0c1e9c5e17932d39ff5849817549d469d274eeddb34129363732f21fdf42757a39d3e5e12df6c4d9763dfc7d86dfccc268a95ee82e9f7864de8f775c1cf57bb58417e9f8"]}, @typed={0x4, 0x141}, @typed={0x8, 0x6c, 0x0, 0x0, @uid=0xee00}, @generic="bbe160e332d254b0c89011de6a5057975d2ff3e712eb4feb8f3cbdc2e1c61d985183f91329d2fb1f5638b2", @generic="7eebc637a3b0ca312d738a3b4aa7f280da71302939cf04b9ef24ca615ebaf0f8d1", @typed={0x8, 0x52, 0x0, 0x0, @pid=r3}, @generic="7c0b5ba97c79178df9a39e93af01d05f0fd8840c3147433d368e1a106d38c7375d70c9f4debed87319a67213cdc621e3cffe83fcb4fc8f037da3534d6581b391539736a3b98a9440ece4548b4344e72ea7b0aa3cdc3ccd180f7ccefdfe18226e17305e4371fc73bd2b6d3d222c378e71216f2e5ffadc031aa261a1306a8b4934b6b3a5d539a7ebd3c6988b58850efe764a025f15b978ed8a6a03891054786f31dccade8b9b662b33425bef115be4"]}, @NL802154_ATTR_SEC_KEY={0x171, 0x30, 0x0, 0x1, [@generic="231452d76e0cf0963ddd88cc6f83d8b88268ab3926de2c831a579811459c8f259437c83ddcfc94f87116dd63ae9037971c9cc8ad4523a18ba166b36d49da54791475d231f67fa4ae697dc47b5c1a4fc131ae95ab69ed7f4c4f72789381b336f62743534d49b05e962f247fbb9a1c4313d465a684a0273a0b1fdeba98ed4a1d59a9f8dd1f344ae7", @generic="7905f68d25b6ab0b814a978840b68d4da41b8c3699e76a91d425a1048babce148327165fddd74738610f705af4b544567c2f02c85797dc7e306792bdc0817da0402d8dcabe126f3153a2baebb2e0d51d9d882793b3ede81509fdca7e77655074f184d544f6e76fb163e141858dda583cf445743c73c906a39720ea666d78da531d540e38dfd28c589778ddee5ddb8491b20492f614095076b7be674368deab9a3df37a53302328b1ba77d28e1acacf1c997351d94c18f8ffcf9a01f6eb319d7fd003c5e038846dfc88be81e20ee16b2b5f8a99f46bd2ba44d867a78844b8fe258299126d796e"]}]}, 0x454}, 0x1, 0x0, 0x0, 0x4000}, 0x20004010) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x10948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 8.041986279s ago: executing program 0 (id=750): r0 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/buffer_size_kb\x00', 0x10bb41, 0x0) write$auto(r0, &(0x7f0000000640)='0\x00\xb9:\xaa\xc1\r\x02T\xf5\b\x00\x00\x00\x00\x00\x00\x00\xa1\xd0\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xcc!\"\xa6\"jH\xcd\x10&b/\x9a\xf1w\xddS\x87\xd1vi\xa9\xeaM\x1dY\xa6\x8d\xf2\\\xac\xe1\xcf\xf7\xff\xff\x148\t\xba\xa0Z\x00M\xbcHM{\xa9\xf1R3X\xdfMbe\t\t\x86\x11v\xa2W\x93m\xd9\x93\x98.7Z\xe7|\x9f\x88\x05\x9ej\xc5\xfaT\xa0\x9a\\i\xd1\xb3\x02\xfa\xfeaq\x8d\xf1\xba\xaf\xcc\xce\xb2\xd3~TR\xf1\xad\xd0\x90n\xb6\xd0\xfc(p\xa3\xabk\x19\xcb\xfda\xff&\xad1\x95\xc5\xa9Gb\xe3\xa4\xf1\xe2\x91\x0e\x91iy\xba%+=\xb7\xd3D\xc6\"\xaeJD,\x19\b\x00\x00\x00\x00\x00\x00\x00\xadG\x94\v\xff\xa4\xfc\x95\x00By\xe9\x80\xd3U\xcd9\xe0\xbc\x8cK\xf3\xfd\x89\xda\xaeH.\xe3\x95Xbw\x02\x99\x03\x00\x00\xe1:\xd8\xaa\x00\xaf\xc3\x89\x91\x19\xfc+\xe9l\xd3\xf5\x00\x00\x00\x00\x00\x00\x00\x85%c\xa6\x0f\xcfI\xb4a\x1d\xc4\x8f\x12X\xdf\xc2\xd7\x8e\xf4\xb9_\xf6\x10\xfc\x9b\xce\xab\xcf\xa9_\x88\xf4\x1b\x12\x12N\f\x84\r\vsI\x86\xe9\xe6J\xb8\xe4\x8f\x02\x9e\xf45\xd9\xf1\xbd\xfd\xb7\xd8OU\t\x9e2K\xe2*~\x9dIe\x00\x00\x00\x00\x00\x00\xce;E\x8c\x05~\x1f\xa5\xa4\x9d\xf6\'\xc4\xf7\xa3\xf2\xfb\x85z>\xd71\xb8\x83\x8e\xa9c6I\x8f\x00\xb2\x03\xfd3\xb8\xe9Xo\xaa\xaeg\xb3\x9e\x8fM:\xa5\x1c \xbe\xfe\"\xa1\x11\xf4~\xa1\x90D/e\xe1\xb1C:}\xd2\x9dT\xc1\xd6[Ld\x06\xee\xc6\xe4\x99uT\xfdl\x94\xe1:\'U\x99\xe9d?\x04\xd8\xf3\x9c\xd8t\x88@\x89\x15p\x84\xac\xa3V=,U\xa4_\xb9\xa7\xd7O\x91\xb2\x03\xbe\xd5\xa8\x03o\x0e\xa7\x93\xabubg\x10\x19\x82\xc4\xa7\xae9\xf1\xc0\n\xfe;n)OAV\xfe\x8fE-\xea\x7fzO0\xde\xc0WK\xe1\x9b\xfe\xbfR\xff$p\xf0\xe4\xa5\xbe_\x8d:\xd6\xc5\xf5\x80+\xe6O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\xd00\xac\xaf\xef\xf6e,\xfe\x0f\x9e\x8d\x92\x81\xb8\xc4v\x92\x04\xf8I\xc6j\xfc\x9a\xadX\xd4\x9e\xa5L\xd5E \xa7\xf9\x17\x80\x86\xa2\xd5\'S\xf2\tY\xdc1#\xaa\xe8+\x14\xb95r\x87\xd4Gm}_\xb7k\xfe\xfb\x1d\xfcH\xd4\x84\x8b \a\x91\xb5\xf2\xc4\xc0M\x05O\x8d\xca\x9e\xee\x173J\xba\x9d\x83\x1b\x9b\x84J\xdf\xdfoYg\x9exSx\x87\x18e\xd7\x12\xfe0\x13C\xf0\xa4\x04\xa9?]\x1b\x8f\r\xc2m\xea\xb6\xc9\\\xbdMj{\xef\x05\xc2|\x8ev,\x85\x86;y\x9ei\x98\xb0\xb1\xc7f1m\xbf\xb4\x14\xeb\xa5\xc9\xb0\xec\xc0\x9aC\x9e\xc5$\xd7H\x1a\xd1\xc1\xfbvc\xb6aH\xf7\x9c7\x8c\x7f>\x19@\xe4\xe1\xc30\x1d,\x12\v\x8a/QV`\x0f\x90X\xcf\x9b\x0f\xcc\x9cvN\x10\xe7^\x95\xd7\xeb\x8c\x9cDS~w\x9c\xb7\xb1;\xbe1\x9a+\xc9\x03\x93}2\v\xd3XX\x18&\x1d\x13\x19\x0eDX3$\x0e\xcf\xd7\xf1\xd6\xe6a\v\xa3\x1a\x9d\x19\xc8\x98V\xe7\x8e\xc8I[\xd6,\xfb \xd3\xbc\t\bO\x80\xe9\xd0\xd7\xbb0@\xe8\xfb\x1c\xeb\xf8\x1d\xda\x88\x8bP\x9f\x15\x93\x8d\xa5#>=S:\vj\vz\x93\xe9\x88NA\xf4\xe6\xce\x96\x8b\x04\x9d9\xf8\x8b\xd0\x8f\x89\x1a\x0e;\xae!\xe7\x12\x05\xd4\xc1\x8eP\xca\xdf\xfb\xc0', 0x1000081) r1 = signalfd$auto(0xffffffffffffffff, &(0x7f0000000000)={0x3}, 0x9) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x4, 0xc, 0xb, 0x5}, "65da29fadd0cc46f332cca119f4e0bf7842f6a81b9c5a9843cd8420d5e6363636e221588f3d215f8ac1e3c1f32ee74eb7157bb2d4cd35933b1f297c54be2bf41092fc0e20d1121f2cd46f86ec7f6167d", 0x7}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x842, 0x0) mmap$auto(0x4, 0x10, 0xdf, 0xeb1, r2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, 0x0, 0xa3d9) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket(0x15, 0x5, 0x0) userfaultfd$auto(0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop5\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nbd10\x00', 0x800, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x9, 0x3, 0x1, &(0x7f0000000000)=0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) r4 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r4, &(0x7f00000000c0)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1004}, 0x1}, 0x2, 0x103) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) 5.326448928s ago: executing program 3 (id=758): r0 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/buffer_size_kb\x00', 0x640fc1, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card2\x00', 0x2001c0, 0x0) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x8100000000) write$auto(r0, &(0x7f0000000040)='0\x00\xb9:\xaa\xc1\r\x02T\xf5\b\x00\x00\x00\x00\x00\x00\x00\xa1\xd0\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xcc!\"\xa6\"jH\xcd\x10&b/\x9a\xf1w\xddS\x87\xd1vi\xa9\xeaM\x1dY\xa6\x8d\xf2\\\xac\xe1\xcf\xf7\xff\xff\x148\t\xba\xa0Z\x00M\xbcHM{\xa9\xf1R3X\xdfMbe\t\t\x86\x11v\xa2W\x93m\xd9\x93\x98.7Z\xe7|\x9f\x88\x05\x9ej\xc5\xfaT\xa0\x9a\\i\xd1\xb3\x02\xfa\xfeaq\x8d\xf1\xba\xaf\xcc\xce\xb2\xd3~TR\xf1\xad\xd0\x90n\xb6\xd0\xfc(p\xa3\xabk\x19\xcb\xfda\xff&\xad1\x95\xc5\xa9Gb\xe3\xa4\xf1\xe2\x91\x0e\x91iy\xba%+=\xb7\xd3D,\x19\b\x00\x00\x00\x00\x00\x00\x00\xadG\x94\v\xff\xa4\xfc\x95\x00By\xe9\x80\xd3U\xcd9\xe0\xbc\x8cK\xf3\xfd\x89\xda\xaeH.\xe3\x95Xbw\x02\x99\x03\x00\x00\xe1:\xd8*\x00\xaf\xc3\x89\x91\x19\xfc+\xe9l\xd3\xf5\x00\x00\x00\x00\x00\x00\x00\x85%c\xa6\x0f\xcfI\xb4a\x1d\xc4\x8f\x12X\xdf\xc2\xd7\x8e\xf4\xb9_\xf6\x10\xfc\x9b\xce\xab\xcf\xa9_\x88\xf4\x1b\x12\x12N\f\x84\r\vsI\x86\xe9\xe6J\xb8\xe4\x8f\x02\x9e\xf45\xd9\xf1\xbd\xfd\x97\xd8OU\t\x9e2K\xe2*~\x9dIe\x00\x00\x00\x00\x00\x00\xce;E\x8c\x05~\x1f\xa5\xa4\x9d\xf6\'\xc4\xf7\xa3\xf2\xfb\x85z>\xd71\xb8\x83\x8e\xa9c6I\x8f\x00\xb2\x03\xfd3\xb8\xe9Xo\xaa\xaeg\xb3\x9e\x8fM:\xa5\x1c \xbe\xfe\"\xa1\x11\xf4~\xa1\x90D/e\xe1\xb1C:}\xd2\x9dT\xc1\xd6[Ld\x06\xee\xc6\xe4\x99uT\xfdl\x94\xe1:\'U\x99\xe9d?\x04\xd8\xf3\x9c\xd8t\x88@\x89\x15p\x84\xac\xa3V=,U\xa4_\xb9\xa7\xd7O\x91\xb2\x03\xbe\xd5\xa8\x03o\x0e\xa7\x93\xabubg\x10\x19\x82\xc4\xa7\xae9\xf1\xc0\n\xfe;n)OAV\xfe\x8fE-\xea\x7fzO0\xde\xc0WK\xe1\x9b\xfe\xbfR\xff$p\xf0\xe4\xa5\xbe_\x8d:\xd6\xc5\xf5\x80+\xe6O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\xd00\xac\xaf\xef\xf6e,\xfe\x0f\x9e\x8d\x92\x81\xb8\xc4v\x92\x04\xf8I\xc6j\xfc\x9a\xadX\xd4\x9e\xa5L\xd5E \xa7\xf9\x17\x80\x86\xa2\xd5\'S\xf2\tY\xdc1#\xaa\xe8+\x14\xb95r\x87\xd4Gm}W\xb7k\xfe\xfb\x1d\xfcH\xd4\x84\x8b \a\x91\xb5\xf2\xc4\xc0M\x05O\x8d\xca\x9e\xee\x173J\xba\x9d\x83\x1b\x9b\x84J\xdf\xdfoYg\x9exSh\x87\x18e\xd7\x12\xfe0\x13C\xf0\xa4\x04\xa9?]\x1b\x8f\r\xc2m\xea\xb6\xc9\\\xbdMj{\xef\x05\xc2|\x8ev,\x85\x86;', 0x1000081) 5.175068739s ago: executing program 3 (id=760): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) r1 = socket(0x2, 0x801, 0x106) getsockopt$auto(r1, 0x11c, 0x1, 0x0, 0x0) r2 = prctl$auto_PR_SCHED_CORE_GET(0x7fffffff, 0x0, 0xffffffffffffffff, 0x5a, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'pimreg\x00'}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) (async) socket(0x1f, 0x800, 0xffffff01) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0x6, 0x0, 0x0, 0x0, 0x1) (async) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), r2) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) (async) io_uring_enter$auto(r2, 0x11, 0x2686, 0x5, 0x0, 0x80000007) (async) socket(0x15, 0x5, 0x0) sysfs$auto(0x2, 0x14, 0x0) (async) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 4.78602096s ago: executing program 2 (id=762): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/wakeup/wakeup8/active_time_ms\x00', 0x8400, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r0, 0x0, 0x39b8) (async, rerun: 64) getsockopt$auto_SO_SNDTIMEO_OLD(0xffffffffffffffff, 0x3ff, 0x15, 0x0, 0x0) (async, rerun: 64) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) socket(0xa, 0x801, 0x106) (async, rerun: 64) r1 = socket(0x2b, 0x1, 0x1) (rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async, rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x0, 0x7fffffffffffffff, 0x7) (async, rerun: 64) mmap$auto(0x100000000000, 0x800, 0xdf, 0x9b72, 0x2, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000003) (async) eventfd2$auto(0x7, 0xf) (async, rerun: 32) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe\x00', 0x2080, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) (async, rerun: 32) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000) (async, rerun: 32) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x202, 0x0) (async) prctl$auto(0x35, 0x1, 0x8, 0x0, 0x0) (async, rerun: 64) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) (rerun: 64) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0xc, 0x37, 0x948a, 0x16, 0x15f4da0a, 0x1, 0x3, 0x300000000000604, 0x40080000001, 0x7, 0x6d3c, 0xc, 0xc8c, 0xffffffffffffffff]}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0x0, 0x4, 0x24) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$auto(0x23, 0xd, 0x8, 0x0, 0x0) 4.717421382s ago: executing program 1 (id=763): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r0, 0x0, 0x81) acct$auto(&(0x7f0000000000)='/dev/fb0\x00') recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers_autoprobe\x00', 0x141000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000500)=""/4096, 0x1000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x151001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)={0x30, r3, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r4 = pidfd_open$auto(0x1, 0x0) clock_getres$auto(0xfffffffffffffffb, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r5, &(0x7f0000000180), 0x0) setns(r4, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0) 2.959965331s ago: executing program 1 (id=764): r0 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/buffer_size_kb\x00', 0x10bb41, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000000)=&(0x7f0000000200)=' ') mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) socket(0x2, 0x3, 0xa) pwrite64$auto(r1, 0x0, 0x400000, 0xc) dup3$auto(r0, r0, 0x5) write$auto(r0, &(0x7f0000000040)='0\x00\xb9:\xaa\xc1\r\x02T\xf5\b\x00\x00\x00\x00\x00\x00\x00\xa1\xd0\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xcc!\"\xa6\"jH\xcd\x10&b/\x9a\xf1w\xddS\x87\xd1vi\xa9\xeaM\x1dY\xa6\x8d\xf2\\\xac\xe1\xcf\xf7\xff\xff\x148\t\xba\xa0Z\x00M\xbcHM{\xa9\xf1R3X\xdfMbe\t\t\x86\x11v\xa2W\x93m\xd9\x93\x98.7Z\xe7|\x9f\x88\x05\x9ej\xc5\xfaT\xa0\x9a\\i\xd1\xb3\x02\xfa\xfeaq\x8d\xf1\xba\xaf\xcc\xce\xb2\xd3~TR\xf1\xad\xd0\x90n\xb6\xd0\xfc(p\xa3\xabk\x19\xcb\xfda\xff&\xad1\x95\xc5\xa9Gb\xe3\xa4\xf1\xe2\x91\x0e\x91iy\xba%+=\xb7\xd3D,\x19\b\x00\x00\x00\x00\x00\x00\x00\xadG\x94\v\xff\xa4\xfc\x95\x00By\xe9\x80\xd3U\xcd9\xe0\xbc\x8cK\xf3\xfd\x89\xda\xaeH.\xe3\x95Xbw\x02\x99\x03\x00\x00\xe1:\xd8*\x00\xaf\xc3\x89\x91\x19\xfc+\xe9l\xd3\xf5\x00\x00\x00\x00\x00\x00\x00\x85%c\xa6\x0f\xcfI\xb4a\x1d\xc4\x8f\x12X\xdf\xc2\xd7\x8e\xf4\xb9_\xf6\x10\xfc\x9b\xce\xab\xcf\xa9_\x88\xf4\x1b\x12\x12N\f\x84\r\vsI\x86\xe9\xe6J\xb8\xe4\x8f\x02\x9e\xf45\xd9\xf1\xbd\xfd\x97\xd8OU\t\x9e2K\xe2*~\x9dIe\x00\x00\x00\x00\x00\x00\xce;E\x8c\x05~\x1f\xa5\xa4\x9d\xf6\'\xc4\xf7\xa3\xf2\xfb\x85z>\xd71\xb8\x83\x8e\xa9c6I\x8f\x00\xb2\x03\xfd3\xb8\xe9Xo\xaa\xaeg\xb3\x9e\x8fM:\xa5\x1c \xbe\xfe\"\xa1\x11\xf4~\xa1\x90D/e\xe1\xb1C:}\xd2\x9dT\xc1\xd6[Ld\x06\xee\xc6\xe4\x99uT\xfdl\x94\xe1:\'U\x99\xe9d?\x04\xd8\xf3\x9c\xd8t\x88@\x89\x15p\x84\xac\xa3V=,U\xa4_\xb9\xa7\xd7O\x91\xb2\x03\xbe\xd5\xa8\x03o\x0e\xa7\x93\xabubg\x10\x19\x82\xc4\xa7\xae9\xf1\xc0\n\xfe;n)OAV\xfe\x8fE-\xea\x7fzO0\xde\xc0WK\xe1\x9b\xfe\xbfR\xff$p\xf0\xe4\xa5\xbe_\x8d:\xd6\xc5\xf5\x80+\xe6O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\xd00\xac\xaf\xef\xf6e,\xfe\x0f\x9e\x8d\x92\x81\xb8\xc4v\x92\x04\xf8I\xc6j\xfc\x9a\xadX\xd4\x9e\xa5L\xd5E \xa7\xf9\x17\x80\x86\xa2\xd5\'S\xf2\tY\xdc1#\xaa\xe8+\x14\xb95r\x87\xd4Gm}W\xb7k\xfe\xfb\x1d\xfcH\xd4\x84\x8b \a\x91\xb5\xf2\xc4\xc0M\x05O\x8d\xca\x9e\xee\x173J\xba\x9d\x83\x1b\x9b\x84J\xdf\xdfoYg\x9exSh\x87\x18e\xd7\x12\xfe0\x13C\xf0\xa4\x04\xa9?]\x1b\x8f\r\xc2m\xea\xb6\xc9\\\xbdMj{\xef\x05\xc2|\x8ev,\x85\x86;', 0x1000081) 2.959692791s ago: executing program 2 (id=765): r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r1) shmctl$auto_IPC_SET(0xfffffffb, 0x1, &(0x7f0000000240)={{0x5, 0x0, 0x0, 0x2f4, 0x19, 0x2, 0x4}, 0x3ff, 0x30000000000, 0xc, 0x9, @inferred=0xffffffffffffffff, @inferred=0x0, 0x6, 0x0, &(0x7f0000000080)="f05e34bc8571350267971a951c5ce28b26451c225f48478ba471c8e5415952d99855c1cdb09f57655ce37d1d2ac3373e7f9699561dc688a5c509a2164dde5916248c42bf2ec4dc98c096df2f66fd730d90c38962c92e868630b867ff9d1e7776b45f3b8d7ec382441b7d9a2b48e09f1327979105a07793b7fb136bbb7ef94f92b891b1102c4c9efce5ca236b6c963db607a6868a2b892b431791ff8402", &(0x7f0000000180)="84faf1cec27b8b93f32ea5b44cd5d06dd0f73d1d2970faf1e1b65730e72828fed18fc6c304078bd39429d0721738de41e0def7397c4f1fbaabe94168a9a2a7a428c382e2a4a4cd1ab9284d2bb38c482ecdae337ee9a4ca3a55636f8236faefacc8068dfd8f45296cb31e64972aa90bfa029384424701a2b160f934a6824b57f286c973b6740eca7cc72983a66cf65756f2e5e38e8f988c8baae9d7d218aedb4494ccbb9f34a84fc7622a008e15ac922336dd88e174187fc30c5423d6"}) msgctl$auto_IPC_SET(0xb, 0x1, &(0x7f0000000300)={{0x8, 0x0, r4, 0x1, 0x1, 0x4, 0x8}, &(0x7f0000000000)=0x2, &(0x7f00000002c0)=0xb4, 0x0, 0x7761a3d5, 0x9e31, 0x7, 0xfe, 0x0, 0x7e6c, 0x6, @inferred=r5, @inferred=r5}) sendmsg$auto_TIPC_NL_NET_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)={0x4b8, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NAME_TABLE={0x318, 0x8, 0x0, 0x1, [@typed={0x14, 0x13c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x6, 0x0, 0x0, @u32=0xffff9fbd}, @generic="05606acd841f", @nested={0x8, 0x11e, 0x0, 0x1, [@nested={0x4, 0x134}]}, @nested={0x2b, 0xbe, 0x0, 0x1, [@nested={0x4, 0x2f}, @generic="d49fd295ca55f504914f133de2d4b23c2ddd95bbd0067583f192855d43f03cc7dfa009"]}, @generic="ce7ff46b9e0f290986de949d6c962744f681da859d0c7fb2a96e8e0c65cee5db15d57284849e08c92b65730f39f6efa32e111060279a582b0f6e20d0c821554d1ec60e6d4dccdc969c4b885e9bdbae4762835e99c732c0f430c1f98a4a44e40ae57f4173ed3d9ea9c2d691abac4bcba574f3729ef13a5cc670e4650b47e7c84a3786329cb9bfd9f593e313441c402bf6cd0f67b63a95a43d4d7158eb6a337f9dde34a41115fca00c4a39cdcadcec53837aef9a91b0", @generic="3c099b513200d9843b8472964544ddc76454315850ff2fbb633fbfdd83030fdb7a02d2edbcf0350eea5132679016b6d361960acaa6a1417717ca5869ba5fbcd026a5d80ecfcb747f71cc5d1ed389b98bd8e7076428774da4b668e806c81c8a2d4a10c1d87e3ec0322c02336153e0bf69f7b36e8d408a2e87ee660cedd7fab9fc4acf701e330a80e65e3a0813ca", @typed={0xc, 0x8b, 0x0, 0x0, @u64=0xffffffffffffffff}, @nested={0x167, 0xd4, 0x0, 0x1, [@typed={0x8, 0x104, 0x0, 0x0, @u32=0x55b}, @typed={0x8, 0xaa, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x8c, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x112}, @nested={0x4, 0xc9}, @nested={0x4, 0xf}, @nested={0x4, 0x4d}, @generic="4862a9c8eb76439333e656d67cedf2a53d50bb16c17a1d0bc039accb27cc410c8e48a40572c7149138faf301ef79fbd89ca350bbcf38a0d06945c4dd6188d48556106cf1552a93030000a6efec88f7f20869b120a9980354764085649540e496dc63743b37829a7452621debc4c04284061e5f5453289ead5454f087748d394ae3e8e4739a9c005d255bc89b3cdcac7e234b8738ac33d08a1a1c61acf6f581ba9323f57a21000000", @generic="d5301395124566e64d822ba36fb9f3fcef7527c7052d24a49712c32d5dff4bf3b906cd830ce3a5e5af8bc1a7395072b7cc41bff17ea45b319d150812d9832da73368a7956050a77c51ed848280cb9909", @generic="8b6db48176e830f8a3de4231515dcc8bdb28802401d300313f154954a1d9c0f2be5e47ac05db5c018633d010314985b9812a0b05e9424ca19a5c0c3d00837ae5070e5e"]}, @typed={0x8, 0xa6, 0x0, 0x0, @fd=r0}]}, @TIPC_NLA_BEARER={0x18a, 0x1, 0x0, 0x1, [@generic="e32dbf36e322eeaa863bab2746425a094cb6eb4ad7c397d75a460898ae7c604af1044aee763f9a7e793bee215f3b46d3c9f6a24aacecb1129b7b32715a74987a52ff4efb610d7a91b24dabf8ff3f09a0ef30bfcb69463076d56926405d41a85920d7830a682b4d50c9040795a4c413ad78a95e868b16a1d06ed8496697bc658608df57e135a541fcc85b1c48e4936e66fca962b452a34bfae2805aad2ded3ccd687f71b24b5e37bf56c05aa826254c7b5dff168e9218dd83940b", @nested={0xc1, 0x5d, 0x0, 0x1, [@nested={0x4, 0x57}, @typed={0x8, 0x80, 0x0, 0x0, @ipv4=@loopback}, @generic="832ce4401606d1801431d635d4c1907046861e8564e1b89282e3280f3414cf16d07dc0cc796d915a0a16531cedea2f3d7ea21298000eb26ac8bfb1", @generic="8932ea643f9fc84b0d9d80444d29f4c09dd1e5b870321db328b8c41ed705d3d6e2d3271cfd1247298dbe1a9f7df89321cb4adc1a6a5d0d0370136de0ceed7261167f4005efdeff5875ddbcb6a86b00b1614c1cc7f83130307b756e9c1a58d22112f96b6365530e238476", @typed={0x8, 0x38, 0x0, 0x0, @uid=r6}, @nested={0x4, 0x14d}]}, @typed={0x8, 0x6a, 0x0, 0x0, @u32=0x9}]}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x20000894}, 0x8000) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 2.94193697s ago: executing program 3 (id=766): close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x0, 0x4, 0x0) socket(0x1e, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) getsockopt$auto_SO_TXTIME(r1, 0x200, 0x3d, &(0x7f0000000000)='\\\x00', &(0x7f0000000040)=0xfffffffa) sendmsg$auto_NET_SHAPER_CMD_GROUP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf25040000000c000180080001000100000010000a800c00018008000100020000000800080080b5c7506baf83e079c2367c4f906d795f5efa329df35c7a7bff94b84a6837774bb73fe307b08fb77ab3654d0e4616a1da53c688bf66c5204b8d033697ddbbd8aff51a38c27f53943062b4deaf49f720ab5035abaa553e0672e2e127dbf021ae113b372c1d31fed10941c4ccaf98726d6409281b1b8b44f6802f0fe278bf56877d0652b2822208f293463e8f2c3b4e536aecd8bd408df538575d760afa95fee8d8da0851228d6c37b4", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0xc080) (async) socketpair$auto(0xff0000, 0x81, 0xfff, &(0x7f0000000080)=0x3) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/version\x00', 0x1, 0x0) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) (async) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) fsconfig$auto_FSCONFIG_CMD_CREATE_EXCL(r0, 0x8, &(0x7f0000000280)='/sys/kernel/security/tomoyo/manager\x00', &(0x7f00000002c0)="dee29be93d54eb8191363ece39c769174fe228ef30a6264cea4d862fff2a6948e5e15e922981e7649d04d32a1de1cbd19f633cf5c1ada1c3bbe8fe307daafec1a7a0743f14cbf069f610817db8a8805460df7fa8f738d3abdfe7588d82d8d0fe8769a55a65eef69e84a8e7c319edbddbd797761b214f762963dcf64999d6ffecada04235234798801660f5e55cc45f1db838d652", 0x4) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS0\x00', 0x48140, 0x0) readv$auto(r4, &(0x7f00000000c0)={0x0, 0x5}, 0x3) (async) mbind$auto(0x0, 0x100000004, 0x100000003, 0x0, 0x6, 0x2) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) (async) mmap$auto(0x0, 0x93d, 0x6, 0xeb1, r1, 0x8000000000000) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x80000, 0x8, 0x17) (async) madvise$auto(0x0, 0x1010001, 0x100000003) read$auto(r5, 0x0, 0x20) 2.732059033s ago: executing program 2 (id=767): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x3, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) memfd_create$auto(&(0x7f00000002c0)='IPVS\x00', 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) getsockopt$auto(0x7, 0x29, 0x41, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r0 = socket(0xa, 0x3, 0xff) connect$auto(r0, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mremap$auto(0xfffffffffffffffe, 0x3, 0x6, 0x62f2, 0x85ec) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x15, r1, 0x300000000000) connect$auto(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) 2.354148254s ago: executing program 3 (id=768): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x23, 0x0, 0x0, 0x1080020}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048800}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x40010) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r1, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r5, 0x6, r2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, r6, 0x4, 0xf, r5, @relative_fd=0xffffffffffffffff, 0xe600}, 0xf) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x6c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r7}, @MACSEC_ATTR_RXSC_CONFIG={0x4e, 0x2, 0x0, 0x1, [@nested={0x4, 0xa3}, @generic="dd43381f2593ce6909f42f9284b0259cd1031fd292b4edb5362a027ed3722c5d06549e0c663481505e5bffac7f2572c752ddf98512470329b63b99e4337b5aefb350645c6415"]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4) r9 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [0x0, 0x0, 0x4], {0x6, 0x6, 0x7ff, 0x2df, 0x500, 0x81, 0xfe, 0x7, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r11 = getpid() shmctl$auto_IPC_RMID(0x52, 0x0, &(0x7f00000005c0)={{0xf8, 0xffffffffffffffff, 0x0, 0x12, 0x1f, 0x0, 0xffff}, 0xea93, 0x6, 0x1ff, 0x38c8, @inferred=r11, @inferred=r11, 0x5, 0x0, &(0x7f0000000400)="6c9b13bc0c25aed6747f9de48838d4c99782c5908acd0b3849ffc390bd76dfff799a4f44829b87ec4e851cc6c5a237d05fb802114dc31cc0ece50d3c1a4008401334b1b639e215d029a0f0487120e3a63df17fe5d10001657d59a70ab4e54a970e9e49239c9e936d3397659b0a2968d423059ab262fa73cbf6f0561325c738c21ba5c500a1a0fbc75befd314748a8db50d61a563a8d06866af936ce17bc3cd8fdac9acdd81e0bf1f5d3ec0a00dda5af035d392513ceda7c031264105a99a4197dee4a26404925cdeb579587588b98c626edabba7fcd9145bca8bf9cce1c2918c5bfeb6b92847124928195b1df881c1", &(0x7f0000000500)="f040ba953090f01194eec44c3b9b90a0c81c79e36a0561f43c1440a0020f39356432bd7da8f2005f5740d6fa3dfff9435c39a588267088cc93458646b9a35a3dc4695b38793b4068900e87c61115352bdc4444398d08b961490f5cfb0701f80b9cd2577598fd45c995b00323bd6678b5585bb306e4"}) shmctl$auto_SHM_STAT_ANY(0x6, 0xf, &(0x7f0000000780)={{0x7fffffff, 0x0, 0x0, 0x5, 0x1, 0x9}, 0x5, 0x0, 0x7fffffff, 0x400, @inferred=r11, @raw=0x80, 0xffff, 0x0, &(0x7f0000000640)="27828ea8c3c3475576b631e9c80f8154b9e2fb3c1c9ef9913fffc13a91fa68cdda0cebba3dc3fd8d3e8ce038b8abe8abbe7e4f1c577900cc9c31ff4ee7333bf357bba1e3581c1d3fd9c708f0f76e931e59df7d246f71c46679383b", &(0x7f00000006c0)="fdfb7be9e581121c73d55f62ed4bc3b1a6683c78cd9a6cb4ae7f6112b86e3f1a3766787470875f13baad4f3f7e33df04d2400354d580b601b54ab1b0919cf6f0fac8cb68bbf1fc1318f7c2a7a8a8cd52d7d9f56c590a793ca723a20ab9b0e98aef7f7eaa7330f8ab53e5b5e076d298e0f6168ab8a9c442913e269a90b249461f633a48162f02b7"}) r14 = fcntl$auto_F_RDLCK(r9, 0x7, 0x0) sendmsg$auto_TIPC_NL_PUBL_GET(r4, &(0x7f0000002ec0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000800)={0x268c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @fd=r2}]}, @TIPC_NLA_MON={0xf0, 0x9, 0x0, 0x1, [@generic="594ea4787724f97d51ecb676209aeb25212a8d3be74905023317fa1dd6e6c6c08c1f45ad6a3cca91b17361d130988cd01990962ea7a345a21b602033430973413df1f63c4178e3d20ba7e87049b56a60b224f31c548fa95709312db4a9df8b209fcb47899b62882c32e5a6ef25573e2787a3b878fbfdde", @generic="97277f1e17020a14eb4cb02349d47114661efc5ac1ecf208e2d46598311803af33787744f168823d263fe997fdf67a463213015e619e034131a89c31477193453eaaa52b46195dbb71144e179b1aa8da7288a729d69c57e00099f803a64d0803472faa74cc1810c6e75c4d3b67ed75e8b14c9b1c9d"]}, @TIPC_NLA_SOCK={0xe4, 0x2, 0x0, 0x1, [@generic="09caaa16b168f3a8b72a28b063104a634445f797aac09ccc5289e2c13816b5c7247ac5b7", @generic="a27d944946c3b6fb2c7a3e4acf0bf4f6a0b87c42886b004b72fe5a7d8b41283f459ca15d294fbfecc1efca899ea6bf5e1a30f86b1013da4c45950e1a6933201228d43654d52cdafd46835526abb5c12bc165d7185b666c3eae44a03f1d2a90f0d355770d739cc39df7d39082f6d8a18febaef90c30a8ffd432499675884b9705ca35b4ee6056a13f056d1c6ff3be084d93cc1d116fc6e0a8f120f3c2", @typed={0x8, 0x142, 0x0, 0x0, @pid=r11}, @typed={0x8, 0x82, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0xc8, 0x0, 0x0, @uid=r12}, @typed={0x8, 0x3, 0x0, 0x0, @u32=0x6}]}, @TIPC_NLA_BEARER={0x2ad, 0x1, 0x0, 0x1, [@typed={0x8, 0x14b, 0x0, 0x0, @u32=0x7fff}, @nested={0x65, 0x8f, 0x0, 0x1, [@typed={0x8, 0x27, 0x0, 0x0, @uid=r13}, @typed={0xc, 0x76, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x92, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0xcd, 0x0, 0x0, @u32=0x4cb4}, @generic="fbb6bc1097e729f35d20c253c6edf81e870253fe0466dd59aa370da1192d9b296654aedf0d680eef90e86c9bde87fc576c3b26a7444d59328079ca1729"]}, @generic="7025cfc8053d73763bf1cb5a3420710bf19be8071be5a8a6ee1def6ad198b146d6ac1c3f8de8d8c983754614aabcaefe90197504bcac3b8535d80f6f135bc96e7dfcca4afab5d34f036fa553237f6e9f1bd2afea26978c5ad49b3f0b24f451216a7280f3166d12038897ff53a143edc6fec1ee5648a9b73a91a43294b2285ad950ec52a64716a4fb", @generic="e5233910dd9e55f8e327143cd9b17092bd311e8358a8d23cf0012aaa01444dc76932098949199cd65cec4cd368cd71cf1d27bb08f4f7224df4795f8368c596eeea706e4a2d52b17dbecc17c6785bfeccae01720fe27712e7ef1bf724294af05ae0c8f8660b0d550ed7af474e", @typed={0x8, 0x96, 0x0, 0x0, @u32=0x81}, @generic="808ca7d812a40e1e600804fead08355a9834410c2c49b5987646a7c6e15f99069a284fe7cd9d50ace8dcbfe726b0b7b0396c655d9156ad37b4de84b42b7ca36b2ec8f2d9edddefc130c333f1ccd6006a213c080081bc8fa80e4c13e3500b7a047b83f18fbdd519f1e105cfdc511ebffd78c812cb4cd9b96e3d96c6dc973e63e536e887a911da05360456d8b39aeb01e5374edf2b0df1b64cbb8bd0bc0a2c884a882a8a28fd9550f5dffb", @generic="8b34cd4514a53982f56c818c3d631e6b48c48759d6d07f4a853649e8852ca9c98829d03700a071010a98e4ce78e900fb60d0737e4d8ba656e1f8668b186670f70cbb122de331b50d829df14f4bfa394f6559f66aa34eefe66a61a62d6dce596fafc910e87c4264e9aa8b3811be29c65174f62d792036950a30af92f1207db568fa8d3530017cfec6db065e9b79c42c830538b3"]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@typed={0x8, 0xd1, 0x0, 0x0, @fd=r8}, @nested={0x1c, 0xd5, 0x0, 0x1, [@nested={0x4, 0x6}, @typed={0xc, 0xff, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0x16}, @nested={0x4, 0x13}]}]}, @TIPC_NLA_PUBL={0x11bc, 0x3, 0x0, 0x1, [@typed={0x8, 0xc3, 0x0, 0x0, @fd=r9}, @nested={0x10c0, 0x23, 0x0, 0x1, [@nested={0x4, 0x57}, @generic="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", @typed={0x8, 0x13f, 0x0, 0x0, @fd=r14}, @generic="87b2f30795fe25643088b1cd3123fbed7807dbb8dbd1e90323f8582a58a9ec5189b9bd4fda611bb27e5ab069bc808d937010827424e84c7a91e50fa8a8f400790f140d450b7ccf04be73dcab6cab6bc91e917eed11676b0654a083252a13e38427aeebdbf9f295e4411832e590b0e022436786f659382affe3f5a46b639042b3cf777514e5d7ec4aa59744e4fce888228af087c99a7170201aabdf9ebf1111416725ae8d76176c2564afbff8", @nested={0x4, 0xda}]}, @nested={0xee, 0x2a, 0x0, 0x1, [@typed={0x4, 0xfd}, @typed={0x4, 0x84}, @nested={0x4, 0x13a}, @generic="daaf6278b7b3feb260f47e2114ab120747944a9d68b5fc6267285ea0508e03b904b4397dda2a2d29f975fa6a458be6350326b860c76ded36a5ae83b61b10197057", @typed={0x8, 0xdd, 0x0, 0x0, @uid}, @generic="d971e2a45b23cff29a6e282900861f91e3585074c690fe562225f432c078cfbe1e7f605586d274933b8c30b32a8afefc2b61e7fd0a414192f729b4cae6cd88be428f75f5df9fc59ff211a8601a01c000052df4cef1c13ff6b129f95b14e853a6361c23723436373dd354086dcc9588f2f1dd486693e6a2f7e57226c12d3c8935a70d5893fffba95c01593bbfd077cb8ef37df2499b"]}]}, @TIPC_NLA_NAME_TABLE={0x1004, 0x8, 0x0, 0x1, [@generic="78cab27716f5dd289eef37c3d808e2566796c549d6b654beba283a32a0245f2caecacf7ec2986b54375e8d1c1d653a021d48904537746bc4f7afd42cb32c9643a236ac78502103540fa530a0b200b9558fc5d62ab7eded263a73d4d7594909d6f11cb52371883d8cc869899da357dd4fdbd2e88e2b0e16d78899938c598837ecc307533eeccd6cb732f30ff856b8d0fa17c76bb1de3f8fc36d9ca8e232843b68b9acef7b6d1ac3b5b7df752e5ccbdd3066368fef04f4ad0bab6fe1ac1f8dde6b6db099bded823f2c08199500afb56b79d149ffa799e2211237c5e9ecaee5c86e82a2bd6aa9fa6c99511e9d25a422e1f599374f0b637771bd41d845856568bcaf8bdc0614d38c1036e8905c6cfad513dbe489dcf4df3ba36a9fb65c5d2788c7da12fe7fefdcf38b113f79f929305a30023fdbcad90007e3df8a7fd09cdda485d572162dfc3b5e7c873995c11fd7e99272d8a28b81352bee2868814cf51057483409237e1805675065deed7187384ec82aea9c2fbc6b05d2daf57e65ec04ccb57ea06ad5a192e04794b2b2c6bc85cf83a1324fee88411286cc7e9fe1459d053b871528e1db09902265be378bace5baf192843e1c4f71ed96625e2ef3594d3161b6a149dbeb12d4e74879d398e1333e1fc1c3bd245f4debd96152fc4c55787f748af8319f867a0d765c9e67791377ade2f3d06a9fc8abea8d63c205e983f32ce023840f2c2fab291664cfe9395f872568c1dc7faaf7d51283c15fe2ec70554e7b49f807fb102a167977bea72329f2b07ab9b85a6513d57eeb7084653a2665ba90d70f986ec9d5aa63e438c53fa013a8337952645fc984a8ac9b728575eb52140d0a3d8b1aa17612548c18a04425fef2aeafcacf6c54ce5a250b8e192012ac977b76f4ba1bf255d65a0a39839b83513eced2c630af0d16fea53f4387de79e81b1226d8dfc73eaa45679671af409345575acb4cec5298c9f6b75cd8920fe4f6ef90e2af3a618ed7ae7a5ecce8cb96b12b813c8989d706f929ac6fe10c5ff26a6a2be3c917fc112dbaa30b5561f5a30e48798b5264e37ec60ad0e3f94649ab98b2159b9fbfe60ce36fa045433834454fd05d475a14fe31235834c2d3b09659ed6591d671753d987a153e8bdbf5e29b26c1c84c93f8af94f34b28b03da894d10ebb1efd5c75c40f0e42173c8f218bde4846af290f5fa3d2404668a4bd7e4ba408cf57be555878325594df952ccef26fc065eff294197ff9dd1a7df34274fd6cadc6cdc0ae4abf48475a6b64848743516ddc9aba51bf931cf938b6e48a091f7828d71341e9f42deb6c9285ded405a6b6637b8eebc86461fd69986dcf17bea550ea8e8b64eeca0458ff1a5b954a4a1a4732be197b7fdef6cd93aa8970dd32d4cf6367a921a65f2b6ae641bd5e21a7c9e4c1ee0c5e33b79f3d24b38721ab36a693a84acf8fb33340ec0ee86f8e1b84f32f6589459ad9bc0e57fa79d1ff7336918177b087ff9035ff11050ba0ae956c92c9980d27559496d58b8454779088284a5a1b9a4bc17e327e29a169a8c717b6bc0b7ef0aeef68fb3e70f99ba6da4178a57e0b296a34393b8f4ffc57ab378ef6ddd3c97190343e00504e45d8563f78183f47be3bafe8f98f2aa90f56923c9b669df01c277f851b135d95c733cbefcabeada90bfdb3aa52c08868c65d1ceeaac9aa33205b5065a648bdb194182ef86449f0f9ca7186cb76e205d810bd2586705ce3a343983d56335b1ed3b22525e9af6a5cc6dfad350e359ad14ca3edb4c2f378b5260d313a6f52566c42698b8001e50021b200d414e43dfaf64a838c49f9d0eccaecea03151b7c06cc09e2c64448212a69ea1ef66cf4d43b4ae60575d89ee73ecd43acf8ed1089673bf93bb27a82baf55ffc34c4f0f06c90a702452760cdf27dcb58a295269e2561b04433714da10e606155be948b4dae4e0821df9ae1ea1276bdf44e6870c448376cb3a8311a7fe72550cb395a4702aa7b98cb63846432345ab46509878842e0a8241df53806cfe43037acab3b24dbfbe0236cd8df6f5a11569df6efbb27c30af693c9af2e01da6df66db203781aa6be1f7b134573ae5bc656b9b05fb9631ae5f6dbe2f38db167fb6dc891691059eca1f2a4662d1e8aaa71f2bccaa2796887cdc8b7ca8459d23fcb13f1ddfd207223637f42d8d5ef6a55068cb6842e8ec0dc489ef85fe2f05c61b7763db47a766704e6815fcb243e5c8e923b729ca93771ebd3cb08dd918fe5b5d0bc0d30aa551a946fb4d2223bf9109c2984da21eb402223a80cceccb5cc490c04991173a27225dad1654dbf2da20068260290c7df032f6509bda5039bb19a5420a4f835a4d66700fa484972be49dfb0eb7aeee9d861afdb987f071d20da15ec5a7eb5d000544806745fd2c5879eff1e86a13bb69c592a8dd739501d087ebab1d3b6d4a81f5aef60fe99458f215a6590d14aca372493ad59a70f6dc0ec9cb22674069e78ec0ea15caa0f9feb3985c94dcd995de5b9e9967400ff876b99f80e54681e9bc7c85623ba4756317d27a1487d08764611394e86196b2131d6f104e7ce9ef78581f6b45a37bf4e76081d0777ccbd9b19804cb8cc9b5f055411f049280bf9ef01514ade46a786a417abcb4651d82e86e21b62e4c56debdcf73baebcfaf69c4b37dbf6ff25601e9e565158ffc51af8ce85fc77b88ea1e09d6f308571ea22938fecaebe4bf803a054a4ab7873508292eee7a42e92e6f0673642852439cb9aa54b7622adc9521c6c40814c4480a7076925d7586527f26d6824a40537d4400d7ee7f6fa4b28a7d9dbdf5b30b7e969cc2791aa23108f1f38986b4deec13bd94db5211604926c9657d43fdbd14550cee781296ca8ff75508205ce2d95233f54ae7d05450920dec59155236b5f4a09531faa06148b83ef192db1db1fe0ab297bb5737628498a53f44538e734764aa05fae2557a8e53b59cf3f2d9a316a95cf6f7239862c8391a6a56d8d036b82307af399fdb5b9a3cab265136f3d6f9c059d851dec1f63df3bd40828ec2db4cc2a1811018253d06569b6dc6efe16fe3842b5617c9035820072debc74223f69936fe1007d5d062c95e63036cccfa832353a5d29203ea01e92fa482656a53a587d7e35d5f51f806c6163cfedfa283a0c37188e8caca17b9979ca8a01c4d2b6e4d1a8373d66100fafd5fe7a8db19681e3f7e2523d89711fc64ff9778f1981e2de0c37a0ecc5c7a40bee6542482ed7db5dfbac5a3c286537f96cfc477cc5e1d794b433225dda4fb9bce2624b6b9ccba64073de05bb26d57fae33e5725017c7f76b413a11b94d003eae4ddd38ac9c55a5a82113fdc7d3b4c4cf94f3dcb67a4ecd856aef5f1d3d0b976be56c271aa56c156f057a3ecf5cb8987d81faee6dad69a1ba973d4d1a8d9332319d2ec2ed744a1d04a6d112e7aff808d4c61ac4ed9bbc751f1c40b9811e18a9b6cfb93f791c7a77515add98edfa6c5f5776742cd7bc71e654fd7b8c3658a620bb8076bfb511329c75073a782b7241565b626188300c987f8b6537dda8847a27771032582be26142e669439359d1f6fcbd6e20f67e2e053b2d5b6a32d4cf7859c4f4e1e067f74fc4670345033b91103ec6b8b8b75eb46e5928a17b5462a64e3d8f5e94efb4e4ea85dccb897330dcc245b3070a0a24467c27d6f85c47d1e3b780a2bec305abe98314e52c7d135f6f6e164240b9739081dc3077ed71e1e448fd206ccf0a445fbb497c62a8a9440d9b4250a08cc331b86fc9d875ba0fce5e7a62cd240071131b1e88898166c0b9038e04bc7cbcf02307265b7e944f4630c00c07a0ed0f1fea031a36eddfb5ebaf2bbba4452d47755ead071fe6f982d5d131ebb026032228da3f47fae0825a9b00a922770a00f7557fe8a23fe769a0204b79aec511bbc4183df62e2396b7cd1a985a38bafc27e9efeecd4e22cad5564b4410b7d72292a49e57c34dd7377067b99453126f97ebbf3c08360d31a842e5381af95a127ca02988a5b287ee7b91402f08000321e7b759e895b4879ace578503c6da40eb721bb18298bbbbc75f1eb94a9ad143027dd09c36521e2dcc61201dcc69d826137905a88301a2675d392c2347ae094a80f68d691686094092dd3096cb071f5c54ff3303d72ece84160a4b54bfcaf434fa11010973c22be316f3cabb787a0603cdb2095af49dbf5dcc039fa74c0d0474d1d735e1ecd56452e7bc57cf1409ec3653102a996e9004191d8feb74c1a42dea832da8fd109687a9e8b477c0a7b68e3c55a9a72fb943f332c0438e3ab307fb71b79ad7d68806d8b2a442b2f7879cb772e270cce128690a47c57425b2ee383e7d162f9806d1761434342c35ecf3efecf9332b18627ff21969a9a7af7c5e648c3ab06dde01b1b8b14a067ae1c81ed88d7a2a98f8e9b2147815c981379a185d98d13da9e03ca801c7c1f6f4ba88ec1e694a9cc772b17c9e4a6ef13365662107fbe865da32bd5fe1b511c185dba877aa5458870f542159cb6bf3c66fa8b90afbe4e1a208073d0dfc754aabec02a89c91adabb49dd0c40e1facaef7fb1f48cfd7e9751a0ff3c3ce841f9b8d43f01188315601953da63f254c91adce4a65011321a42f87f39ceecb2700cdf29349fa421f1f90b7a82e1a102cb510326a1b387aab4493f8d1659852c1694eb15492d46b73140212a5aaf7c08c210fa084f79ea7b2585cb70fb7423fd5712a2dbff6fa831f23eea41951c1e111be0e15b786d0ed9d11640434226de1689458511348d0c7d713524b6b32f73fa8e7d4e1be48fc61791047775182e8d77f639ae09fd783df291470f3cf4e7f936c4e9ef9675c731d3f31d9e18787aebab3ab7c1633199e801a610d650503bb621168a48c52c60bb077ad763f3f693db70d5305c11df4ac80e43cd054bdba89d6c8b83daac9a64d426ed4b029843906172d4c78101819ecb1a8fdfcef1fb776c570ec7cd4ba6638bf927bd6f822a7bcc62f8c238bffe13009327ef92ebaf6741d9aab16d73de808c5375419a1b8b1a2dd3c0fcb04fd2693b281af1245022c5935111e355151fcdfe26fe8e5d9478697cd25df08cbf8530ba793e9ab6ce2a926d244ef8fb91933b79fb10aa71c4d17625768baa7c38d782d867cd9660dab63dbb1d49b559ce04efbd7c249cbed2341bbfd185a8c1794b6cf9818ecf2b84433aa51e2c7290e0551c5bc1da72b9f8cd61ff6a8a183ca2e5350630a396504f9e906a1d31d5523c6af77030d54117a4307b573145c6f1e6d1be4e33df1d70e38281b522f221d87f9b80d0919b6797a35fa638a9d8aaf316552926cacb870779b36b6a4619b3eac767e3af4ac9162d622dc17587b82ad02af62dde213ea03e64c4400883123539233b8ec2ced14200235f8047192e45603dae6849972e308b7727dc0c189eb07c72445f56a9bf6c92239c5fade54acac784262851039717e238087ace35ed3ad5330f9672d4cc2709e09d1754dd311e122021476d7be42c1504b68288f0d79ec11dec6f2d9cb0fd2387343b59d1a224caa2fb5b96fecc55c70971a02471e27fb110e335d81f174a40270867280c30cf5e805ffd5e5e00c4c45f14eb730b4b6b63b50fe41ed756f3d992666cb6f362c6f686c97774f165f9f7dac3b465d5be93e2d66697c5df38569299120009bb6ca03bc5e7d97371e89a949c8b48ecfd93c83168ed86fd29e8599f8ff4af06a50ddb271c514ff5455baf768dadd3f29c11f0effc8ba135590892a434f8afb0ddb36e57187df39d168be68debcbecfcd29cf8f1fa92728f36e220c8df07894ee0e02fb"]}]}, 0x268c}, 0x1, 0x0, 0x0, 0x808}, 0x4048050) process_vm_readv$auto(r11, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r15 = socket(0xa, 0x2, 0x0) setsockopt$auto(r15, 0x29, 0x30, 0x0, 0x56b) finit_module$auto(r10, &(0x7f0000000040)=':[\x00', 0xffffffff) r16 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r16, 0x40096101, 0x0) 2.346388757s ago: executing program 1 (id=776): ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto(0x3, 0xae78, 0x38) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x1102, 0x0) ioctl$auto_USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose14/carrier_changes\x00', 0x103000, 0x0) read$auto(r1, 0x0, 0x2) socket(0x2, 0x80002, 0x73) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r2, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r2, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file1\x00', 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181942, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/queues/rx-9/rps_cpus\x00', 0x2002, 0x0) write$auto(r3, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x502, 0x0) setresgid$auto(0xffffffffffffffff, 0x28000000000000, 0x7) pread64$auto(r4, 0x0, 0x100000001, 0x100) shmdt$auto(0x0) 1.723149394s ago: executing program 1 (id=769): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) setsockopt$auto(r0, 0x100, 0x7, &(0x7f0000000200)='nl80211\x00', 0xe) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd8966efb91b2e351f000008000300", @ANYRES32=r2], 0x28}}, 0x4000000) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) mseal$auto(0x0, 0x7dda, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c8dd4d3b78de27f89000100f55091b9a817e546af9a06f251afbcb6e0a734fa51d78a1117bb53037af9192c0073e82a128f469a7b3813c74ad396ff5bb76e84e815cd72e7db77c2be9671f86360", @ANYRES16=r4, @ANYBLOB="290928bd7000fbdbdf250300000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x240008c5}, 0x48094) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) 1.628198426s ago: executing program 3 (id=770): r0 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/tracing/buffer_size_kb\x00', 0x10bb41, 0x0) adjtimex$auto(&(0x7f0000000380)={0x7, 0x0, 0xffffffff, 0xa, 0x6b1f, 0x7, 0x9, 0x0, 0x2, 0x8, 0x8, {0x1adc44e9, 0x1000}, 0x7, 0x8b, 0x8, 0x200, 0x0, 0x3, 0x4, 0x40, 0x2, 0x1a1, 0xffffffec}) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) mbind$auto(0x7fff, 0x8, 0xc, &(0x7f0000000000)=0x5, 0x6, 0x1a) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(r0, &(0x7f0000000040)='0\x00\xb9:\xaa\xc1\r\x02T\xf5\b\x00\x00\x00\x00\x00\x00\x00\xa1\xd0\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xcc!\"\xa6\"jH\xcd\x10&b/\x9a\xf1w\xddS\x87\xd1vi\xa9\xeaM\x1dY\xa6\x8d\xf2\\\xac\xe1\xcf\xf7\xff\xff\x148\t\xba\xa0Z\x00M\xbcHM{\xa9\xf1R3X\xdfMbe\t\t\x86\x11v\xa2W\x93m\xd9\x93\x98.7Z\xe7|\x9f\x88\x05\x9ej\xc5\xfaT\xa0\x9a\\i\xd1\xb3\x02\xfa\xfeaq\x8d\xf1\xba\xaf\xcc\xce\xb2\xd3~TR\xf1\xad\xd0\x90n\xb6\xd0\xfc(p\xa3\xabk\x19\xcb\xfda\xff&\xad1\x95\xc5\xa9Gb\xe3\xa4\xf1\xe2\x91\x0e\x91iy\xba%+=\xb7\xd3D,\x19\b\x00\x00\x00\x00\x00\x00\x00\xadG\x94\v\xff\xa4\xfc\x95\x00By\xe9\x80\xd3U\xcd9\xe0\xbc\x8cK\xf3\xfd\x89\xda\xaeH.\xe3\x95Xbw\x02\x99\x03\x00\x00\xe1:\xd8*\x00\xaf\xc3\x89\x91\x19\xfc+\xe9l\xd3\xf5\x00\x00\x00\x00\x00\x00\x00\x85%c\xa6\x0f\xcfI\xb4a\x1d\xc4\x8f\x12X\xdf\xc2\xd7\x8e\xf4\xb9_\xf6\x10\xfc\x9b\xce\xab\xcf\xa9_\x88\xf4\x1b\x12\x12N\f\x84\r\vsI\x86\xe9\xe6J\xb8\xe4\x8f\x02\x9e\xf45\xd9\xf1\xbd\xfd\x97\xd8OU\t\x9e2K\xe2*~\x9dIe\x00\x00\x00\x00\x00\x00\xce;E\x8c\x05~\x1f\xa5\xa4\x9d\xf6\'\xc4\xf7\xa3\xf2\xfb\x85z>\xd71\xb8\x83\x8e\xa9c6I\x8f\x00\xb2\x03\xfd3\xb8\xe9Xo\xaa\xaeg\xb3\x9e\x8fM:\xa5\x1c \xbe\xfe\"\xa1\x11\xf4~\xa1\x90D/e\xe1\xb1C:}\xd2\x9dT\xc1\xd6[Ld\x06\xee\xc6\xe4\x99uT\xfdl\x94\xe1:\'U\x99\xe9d?\x04\xd8\xf3\x9c\xd8t\x88@\x89\x15p\x84\xac\xa3V=,U\xa4_\xb9\xa7\xd7O\x91\xb2\x03\xbe\xd5\xa8\x03o\x0e\xa7\x93\xabubg\x10\x19\x82\xc4\xa7\xae9\xf1\xc0\n\xfe;n)OAV\xfe\x8fE-\xea\x7fzO0\xde\xc0WK\xe1\x9b\xfe\xbfR\xff$p\xf0\xe4\xa5\xbe_\x8d:\xd6\xc5\xf5\x80+\xe6O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,\xd00\xac\xaf\xef\xf6e,\xfe\x0f\x9e\x8d\x92\x81\xb8\xc4v\x92\x04\xf8I\xc6j\xfc\x9a\xadX\xd4\x9e\xa5L\xd5E \xa7\xf9\x17\x80\x86\xa2\xd5\'S\xf2\tY\xdc1#\xaa\xe8+\x14\xb95r\x87\xd4Gm}W\xb7k\xfe\xfb\x1d\xfcH\xd4\x84\x8b \a\x91\xb5\xf2\xc4\xc0M\x05O\x8d\xca\x9e\xee\x173J\xba\x9d\x83\x1b\x9b\x84J\xdf\xdfoYg\x9exSh\x87\x18e\xd7\x12\xfe0\x13C\xf0\xa4\x04\xa9?]\x1b\x8f\r\xc2m\xea\xb6\xc9\\\xbdMj{\xef\x05\xc2|\x8ev,\x85\x86;', 0x1000081) 1.533086418s ago: executing program 2 (id=771): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto_event_trigger_fops_trace(r0, &(0x7f0000000340)="087a5fc885515acc", 0x8) (async) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="60065b708f05ad0702b6a6034324970fee786f803406e42816c273312a4bbab6ce46d88803ad107ab0331c08ec38f76c3015f1ee470ab72e4a32e3f151fd9e8133b4fdea35437331197e8551f5b57364b7f890275dfe39dbbd369c3b1366da75218cd53e209f111d2be78c71d90bcb4a39c8dc878a55a402351e8daebff23692f2121fc5539ea3209e62a355c60e24385cfb35795f13f88e53b70cc764730afa972575bb0f9d9e1e4852c3ec2da3db06d1fe88035b31c94f187db931e0f06573bd9ef8c07e57c8c4d1b5cf6169788e45f748c177b7ba33edd901646442eba6a5b97538e2f42bb802845fba41d7a82eec29577789d3"], 0x1ac}}, 0x40000) (async, rerun: 32) r2 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) (rerun: 32) write$auto(r2, 0x0, 0x0) (async, rerun: 32) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/mounts\x00', 0x12000, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r1) sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fca595dbdf252a00000076002d800100aa792c8baf0bbfd9718b8dfed01978f5097b795bb9a42b43a80b9e258a3d6b9ed7abaa5c70cf379c2c2b6d62b5083fc0190f0252e336c47481769b6f52702d26db29db6c4ae112c006e7b12b0e227bd99908825cea8ca6f643865329422d1767d3c2f2ddf24e1186ca6b59234939f23a647ab67d646f82f5"], 0x94}}, 0x40005) (async) r4 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) write$auto_dev_fops_plock(r4, &(0x7f0000000740)="cacbc35874f3520ede8ad842e90500ae67af5c4b22cd56582e0f3d8bc5c5f248d71a9dea75b359f918bd7aa8c9691bba9d686ef9a6ca1081bfbb40e2ea75159b", 0x40) (async) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002a80), r5) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r5, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf2523080000280001a4019490c95a8ed7683103746f5f6272696467650008fa020000800000f3000100", @ANYRES32=r7, @ANYBLOB="0500020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x881}, 0xc810) (async) ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r0, 0xc008aec1, &(0x7f0000000540)={0x7, 0x0, [{0x7, 0x1, 0x0, 0x7fff, 0x0, 0x9, 0x1}, {0x469, 0x1, 0x1, 0x0, 0x0, 0xd, 0x65}, {0x5, 0x8000, 0x9, 0x6e15, 0x0, 0x2, 0x80000001}, {0x8, 0xb917, 0x4, 0x80000000, 0x1, 0x7, 0x489}, {0x7, 0x5, 0xffffffff, 0x100, 0x15, 0x200, 0x2}, {0x5, 0x100, 0x100, 0x70850ba3, 0x2}, {0x1ff, 0x7, 0x9, 0x2, 0x4, 0x4911d3ee, 0x3}, {0x3, 0x3ff, 0x7482a545, 0x4602, 0x2, 0x1f44, 0x1}, {0x6, 0x8c, 0x2, 0x10000, 0x9, 0x1, 0xd}]}) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x163340, 0x6a) (async) r8 = socket(0x2, 0x3, 0xa) connect$auto(r8, &(0x7f00000000c0), 0x55) (async) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) io_uring_setup$auto(0x9e6, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffdb9, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x4000814}, 0x4000010) (async, rerun: 64) mmap$auto(0x8000000, 0x1000, 0xdf, 0xeb1, r8, 0x8000) (rerun: 64) 1.304840484s ago: executing program 3 (id=772): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffd, 0x401bf, 0x7352, 0x3c, 0x662, 0x1ffde, 0x5, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x80000000009, 0x6, 0x10003, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x3, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0xffff]}, 0x1fe, 0xd) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf25030000000600070008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600060040"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) write$auto(0xffffffffffffffff, 0x0, 0x7d) socket(0x2b, 0x1, 0x1) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/macvlan1/app_solicit\x00', 0xd3000, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.231587081s ago: executing program 1 (id=773): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0xff) ioctl$auto(0x3, 0x89e0, 0x91) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x2, 0x1) readlink$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='\x00', 0xd) io_uring_setup$auto(0x6, 0x0) sendto$auto(r0, 0x0, 0xb, 0x6, &(0x7f0000000100)=@phonet={0x23, 0x3, 0xc0, 0xfd}, 0x1c) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x10001) read$auto(0x3, 0x0, 0x7c) r1 = socket(0x2, 0x801, 0x106) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) write$auto(0x3, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000000), r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) sysinfo$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0xa, 0x1000}, 0x800009}, 0x5, 0x20000000) setreuid$auto(0x15, 0x0) keyctl$auto(0x4, 0xfffff7ffffffffff, 0x0, 0x8, 0x8) connect$auto(0x3, &(0x7f00000000c0), 0x55) read$auto(0x3, 0x0, 0x7) setsockopt$auto(0x3, 0x0, 0xc, 0x0, 0x5) io_uring_setup$auto(0x6, 0x0) 1.186157654s ago: executing program 2 (id=774): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r0, 0x0, 0x81) acct$auto(&(0x7f0000000000)='/dev/fb0\x00') recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers_autoprobe\x00', 0x141000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000500)=""/4096, 0x1000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x151001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)={0x30, r3, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r4 = pidfd_open$auto(0x1, 0x0) clock_getres$auto(0xfffffffffffffffb, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r5, &(0x7f0000000180), 0x0) setns(r4, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0) 69.93014ms ago: executing program 2 (id=775): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0x18, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource\x00', 0xa00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/187, 0xd6) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) shmctl$auto_IPC_INFO(0x156a, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x7, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x165) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) setsockopt$auto(0x3, 0x1, 0x5, 0x0, 0x9) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) rt_sigqueueinfo$auto(0x0, 0x10, 0x0) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, 0x0) 0s ago: executing program 1 (id=777): mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x4, 0x2, 0x4, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x9, 0x7, 0x5}) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) mmap$auto(0x0, 0x9, 0x9cad, 0x8012, 0x3, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='afs\x00', 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) (async) adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x4, 0x2, 0x4, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x9, 0x7, 0x5}) (async) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) (async) mmap$auto(0x0, 0x9, 0x9cad, 0x8012, 0x3, 0x8000) (async) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='afs\x00', 0x5, 0x0) (async) kernel console output (not intermixed with test programs): mes 1 [ 150.837770][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.2.141 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 150.837810][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 150.837826][ T6582] Call Trace: [ 150.837835][ T6582] [ 150.837846][ T6582] dump_stack_lvl+0x16c/0x1f0 [ 150.837885][ T6582] should_fail_ex+0x512/0x640 [ 150.837929][ T6582] _copy_from_user+0x2e/0xd0 [ 150.837973][ T6582] copy_msghdr_from_user+0x98/0x160 [ 150.838001][ T6582] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 150.838052][ T6582] ? kfree+0x252/0x4d0 [ 150.838092][ T6582] ? __pfx__kstrtoull+0x10/0x10 [ 150.838130][ T6582] ___sys_sendmsg+0xfe/0x1d0 [ 150.838158][ T6582] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.838219][ T6582] ? __pfx___might_resched+0x10/0x10 [ 150.838258][ T6582] __sys_sendmmsg+0x200/0x420 [ 150.838289][ T6582] ? __pfx___sys_sendmmsg+0x10/0x10 [ 150.838348][ T6582] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 150.838402][ T6582] ? fput+0x70/0xf0 [ 150.838437][ T6582] ? ksys_write+0x1b9/0x240 [ 150.838463][ T6582] ? __pfx_ksys_write+0x10/0x10 [ 150.838489][ T6582] ? rcu_is_watching+0x12/0xc0 [ 150.838522][ T6582] __x64_sys_sendmmsg+0x9c/0x100 [ 150.838550][ T6582] ? lockdep_hardirqs_on+0x7c/0x110 [ 150.838584][ T6582] do_syscall_64+0xcd/0x230 [ 150.838622][ T6582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.838653][ T6582] RIP: 0033:0x7f954498e969 [ 150.838684][ T6582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.838713][ T6582] RSP: 002b:00007f95427f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 150.838741][ T6582] RAX: ffffffffffffffda RBX: 00007f9544bb5fa0 RCX: 00007f954498e969 [ 150.838761][ T6582] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 150.838779][ T6582] RBP: 00007f95427f6090 R08: 0000000000000000 R09: 0000000000000000 [ 150.838797][ T6582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.838814][ T6582] R13: 0000000000000000 R14: 00007f9544bb5fa0 R15: 00007fff545b3438 [ 150.838853][ T6582] [ 151.330740][ T6576] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 151.483251][ T6576] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 151.667694][ T6576] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 151.957808][ T6576] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 152.001604][ T6576] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.057977][ T6576] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 152.138897][ T6576] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 152.200071][ T6576] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 152.260194][ T6576] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.282015][ T6576] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 152.437970][ T6576] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 152.514256][ T6576] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 152.559918][ T6576] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.597333][ T6576] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 152.657133][ T6576] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 152.834438][ T6576] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.259079][ T6605] input: jJǸ-¶š9ã%vø“û¨lÐQ  J8fi‘ as /devices/virtual/input/input14 [ 153.418196][ T56] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.062815][ T56] Bluetooth: hci1: command 0x0c1a tx timeout [ 154.296601][ T56] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.588985][ T6628] FAULT_INJECTION: forcing a failure. [ 154.588985][ T6628] name failslab, interval 1, probability 0, space 0, times 0 [ 154.602029][ T6628] CPU: 1 UID: 0 PID: 6628 Comm: syz.1.150 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 154.602057][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 154.602070][ T6628] Call Trace: [ 154.602077][ T6628] [ 154.602085][ T6628] dump_stack_lvl+0x16c/0x1f0 [ 154.602116][ T6628] should_fail_ex+0x512/0x640 [ 154.602146][ T6628] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 154.602173][ T6628] should_failslab+0xc2/0x120 [ 154.602199][ T6628] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 154.602222][ T6628] ? __alloc_skb+0x2b2/0x380 [ 154.602268][ T6628] __alloc_skb+0x2b2/0x380 [ 154.602301][ T6628] ? __pfx___alloc_skb+0x10/0x10 [ 154.602334][ T6628] ? __local_bh_enable_ip+0xa4/0x120 [ 154.602359][ T6628] ? lockdep_hardirqs_on+0x7c/0x110 [ 154.602383][ T6628] ? __dev_queue_xmit+0x896/0x43e0 [ 154.602412][ T6628] ? __local_bh_enable_ip+0xa4/0x120 [ 154.602435][ T6628] ? __dev_queue_xmit+0x896/0x43e0 [ 154.602464][ T6628] ? __dev_queue_xmit+0x8b7/0x43e0 [ 154.602497][ T6628] alloc_skb_with_frags+0xe0/0x860 [ 154.602528][ T6628] sock_alloc_send_pskb+0x7fb/0x990 [ 154.602570][ T6628] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 154.602605][ T6628] ? __lock_acquire+0x5ca/0x1ba0 [ 154.602641][ T6628] __ip6_append_data+0x2ac9/0x4710 [ 154.602670][ T6628] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 154.602705][ T6628] ? __pfx___ip6_append_data+0x10/0x10 [ 154.602729][ T6628] ? ip6_setup_cork+0xd01/0x15d0 [ 154.602753][ T6628] ip6_make_skb+0x2c8/0x3f0 [ 154.602778][ T6628] ? ip6_dst_check+0x343/0x940 [ 154.602811][ T6628] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 154.602834][ T6628] ? __pfx_ip6_make_skb+0x10/0x10 [ 154.602859][ T6628] ? find_held_lock+0x2b/0x80 [ 154.602885][ T6628] ? sk_dst_check+0x1da/0x540 [ 154.602924][ T6628] ? udpv6_sendmsg+0x24fe/0x3070 [ 154.602952][ T6628] udpv6_sendmsg+0x24fe/0x3070 [ 154.602983][ T6628] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 154.603012][ T6628] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 154.603040][ T6628] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 154.603065][ T6628] ? __lock_acquire+0x5ca/0x1ba0 [ 154.603109][ T6628] ? __lock_acquire+0xaa4/0x1ba0 [ 154.603146][ T6628] ? iovec_from_user+0xbb/0x140 [ 154.603181][ T6628] ? __pfx_aa_sk_perm+0x10/0x10 [ 154.603204][ T6628] ? __import_iovec+0x1c8/0x660 [ 154.603235][ T6628] ? __might_fault+0xe3/0x190 [ 154.603264][ T6628] ? __might_fault+0x13b/0x190 [ 154.603287][ T6628] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 154.603318][ T6628] ? inet6_sendmsg+0x105/0x140 [ 154.603348][ T6628] inet6_sendmsg+0x105/0x140 [ 154.603380][ T6628] ____sys_sendmsg+0x705/0xc70 [ 154.603408][ T6628] ? copy_msghdr_from_user+0x10a/0x160 [ 154.603428][ T6628] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.603458][ T6628] ? kfree+0x252/0x4d0 [ 154.603489][ T6628] ? __pfx__kstrtoull+0x10/0x10 [ 154.603518][ T6628] ___sys_sendmsg+0x134/0x1d0 [ 154.603539][ T6628] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.603583][ T6628] ? __pfx___might_resched+0x10/0x10 [ 154.603612][ T6628] __sys_sendmmsg+0x200/0x420 [ 154.603635][ T6628] ? __pfx___sys_sendmmsg+0x10/0x10 [ 154.603665][ T6628] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 154.603703][ T6628] ? fput+0x70/0xf0 [ 154.603727][ T6628] ? ksys_write+0x1b9/0x240 [ 154.603746][ T6628] ? __pfx_ksys_write+0x10/0x10 [ 154.603764][ T6628] ? rcu_is_watching+0x12/0xc0 [ 154.603787][ T6628] __x64_sys_sendmmsg+0x9c/0x100 [ 154.603806][ T6628] ? lockdep_hardirqs_on+0x7c/0x110 [ 154.603829][ T6628] do_syscall_64+0xcd/0x230 [ 154.603857][ T6628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.603878][ T6628] RIP: 0033:0x7fdea058e969 [ 154.603894][ T6628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.603915][ T6628] RSP: 002b:00007fdea13e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 154.603935][ T6628] RAX: ffffffffffffffda RBX: 00007fdea07b5fa0 RCX: 00007fdea058e969 [ 154.603949][ T6628] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 154.603962][ T6628] RBP: 00007fdea13e7090 R08: 0000000000000000 R09: 0000000000000000 [ 154.603975][ T6628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.603988][ T6628] R13: 0000000000000000 R14: 00007fdea07b5fa0 R15: 00007ffcf51c93a8 [ 154.604014][ T6628] [ 155.099660][ T56] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.496799][ T56] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.150805][ T56] Bluetooth: hci1: command 0x0c1a tx timeout [ 156.376954][ T56] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.648953][ T6644] zram0: detected capacity change from 0 to 8 [ 157.100767][ T6655] ubi: mtd0 is already attached to ubi0 [ 157.178366][ T56] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.579926][ T56] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.710611][ T6666] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:16: unknown uevent action string [ 157.722670][ T6666] acpi device:16: uevent: failed to send synthetic uevent: -22 [ 157.923378][ T6671] kAFS: Invalid Command on /proc/fs/afs/cells file [ 158.217158][ T56] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.242912][ T6674] FAULT_INJECTION: forcing a failure. [ 158.242912][ T6674] name failslab, interval 1, probability 0, space 0, times 0 [ 158.295541][ T6674] CPU: 1 UID: 0 PID: 6674 Comm: syz.1.162 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 158.295582][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 158.295598][ T6674] Call Trace: [ 158.295606][ T6674] [ 158.295617][ T6674] dump_stack_lvl+0x16c/0x1f0 [ 158.295654][ T6674] should_fail_ex+0x512/0x640 [ 158.295692][ T6674] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 158.295740][ T6674] should_failslab+0xc2/0x120 [ 158.295773][ T6674] __kmalloc_cache_noprof+0x6a/0x3e0 [ 158.295818][ T6674] ? raw_ioctl_init+0x263/0x860 [ 158.295848][ T6674] raw_ioctl_init+0x263/0x860 [ 158.295875][ T6674] ? __pfx_raw_ioctl_init+0x10/0x10 [ 158.295897][ T6674] ? tomoyo_path_number_perm+0x18d/0x580 [ 158.295976][ T6674] raw_ioctl+0xa3c/0x2c30 [ 158.296007][ T6674] ? __pfx_raw_ioctl+0x10/0x10 [ 158.296042][ T6674] ? xfd_validate_state+0x5d/0x180 [ 158.296087][ T6674] ? __pfx_raw_ioctl+0x10/0x10 [ 158.296111][ T6674] __x64_sys_ioctl+0x190/0x200 [ 158.296147][ T6674] do_syscall_64+0xcd/0x230 [ 158.296180][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.296206][ T6674] RIP: 0033:0x7fdea058e969 [ 158.296225][ T6674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.296249][ T6674] RSP: 002b:00007fdea13e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 158.296273][ T6674] RAX: ffffffffffffffda RBX: 00007fdea07b5fa0 RCX: 00007fdea058e969 [ 158.296290][ T6674] RDX: 0000200000000300 RSI: 0000000041015500 RDI: 0000000000000008 [ 158.296305][ T6674] RBP: 00007fdea0610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 158.296321][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.296336][ T6674] R13: 0000000000000000 R14: 00007fdea07b5fa0 R15: 00007ffcf51c93a8 [ 158.296367][ T6674] [ 158.459763][ T56] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.844642][ T6679] FAULT_INJECTION: forcing a failure. [ 158.844642][ T6679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.890289][ T6679] CPU: 1 UID: 0 PID: 6679 Comm: syz.1.164 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 158.890330][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 158.890347][ T6679] Call Trace: [ 158.890356][ T6679] [ 158.890367][ T6679] dump_stack_lvl+0x16c/0x1f0 [ 158.890408][ T6679] should_fail_ex+0x512/0x640 [ 158.890454][ T6679] _copy_from_user+0x2e/0xd0 [ 158.890500][ T6679] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 158.890540][ T6679] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 158.890577][ T6679] ? trace_kmalloc+0x2b/0xd0 [ 158.890614][ T6679] ? do_softirq+0xd1/0xf0 [ 158.890644][ T6679] ? ip_setsockopt+0x59/0xf0 [ 158.890685][ T6679] do_ip_setsockopt+0x23e7/0x3130 [ 158.890728][ T6679] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 158.890789][ T6679] ip_setsockopt+0x59/0xf0 [ 158.890831][ T6679] ipv6_setsockopt+0x155/0x170 [ 158.890867][ T6679] sctp_setsockopt+0x169/0xb870 [ 158.890937][ T6679] ? __pfx_sctp_setsockopt+0x10/0x10 [ 158.890979][ T6679] ? __lock_acquire+0x5ca/0x1ba0 [ 158.891017][ T6679] ? __pfx_aa_sk_perm+0x10/0x10 [ 158.891052][ T6679] ? find_held_lock+0x2b/0x80 [ 158.891084][ T6679] ? sock_common_setsockopt+0x2e/0xf0 [ 158.891121][ T6679] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 158.891158][ T6679] do_sock_setsockopt+0x221/0x470 [ 158.891193][ T6679] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 158.891254][ T6679] __sys_setsockopt+0x120/0x1a0 [ 158.891308][ T6679] __x64_sys_setsockopt+0xbd/0x160 [ 158.891354][ T6679] ? do_syscall_64+0x91/0x230 [ 158.891390][ T6679] ? lockdep_hardirqs_on+0x7c/0x110 [ 158.891424][ T6679] do_syscall_64+0xcd/0x230 [ 158.891464][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.891494][ T6679] RIP: 0033:0x7fdea058e969 [ 158.891517][ T6679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.891545][ T6679] RSP: 002b:00007fdea13e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 158.891572][ T6679] RAX: ffffffffffffffda RBX: 00007fdea07b5fa0 RCX: 00007fdea058e969 [ 158.891592][ T6679] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 158.891609][ T6679] RBP: 00007fdea13e7090 R08: 0000000000000028 R09: 0000000000000000 [ 158.891627][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.891644][ T6679] R13: 0000000000000000 R14: 00007fdea07b5fa0 R15: 00007ffcf51c93a8 [ 158.891683][ T6679] [ 159.268078][ T56] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.656714][ T56] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.306638][ T56] Bluetooth: hci1: command 0x0c1a tx timeout [ 160.332762][ T6700] netlink: 130 bytes leftover after parsing attributes in process `syz.0.169'. [ 160.410857][ T6690] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 160.457139][ T6690] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 160.481735][ T6690] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.517326][ T6690] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.556299][ T6704] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 161.200405][ T6712] zram: Cannot change disksize for initialized device [ 161.608419][ T6613] blktrace: Concurrent blktraces are not allowed on loop6 [ 162.086946][ T6741] netlink: 186 bytes leftover after parsing attributes in process `syz.2.180'. [ 162.416239][ T6744] netlink: 342 bytes leftover after parsing attributes in process `syz.1.182'. [ 162.433020][ T6744] netlink: 342 bytes leftover after parsing attributes in process `syz.1.182'. [ 162.451018][ T6744] netlink: 'syz.1.182': attribute type 3 has an invalid length. [ 162.456664][ T56] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.481361][ T6744] netlink: 146 bytes leftover after parsing attributes in process `syz.1.182'. [ 162.536963][ T56] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.543072][ T56] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.551258][ T56] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.430764][ T6780] Invalid ELF header len 1 [ 165.770738][ T6845] bridge0: port 3(syz_tun) entered blocking state [ 165.787191][ T6845] bridge0: port 3(syz_tun) entered disabled state [ 165.804116][ T6845] syz_tun: entered allmulticast mode [ 165.829623][ T6845] syz_tun: entered promiscuous mode [ 165.835341][ T6847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.208'. [ 165.878252][ T6845] bridge0: port 3(syz_tun) entered blocking state [ 165.885102][ T6845] bridge0: port 3(syz_tun) entered forwarding state [ 166.246206][ T6858] FAULT_INJECTION: forcing a failure. [ 166.246206][ T6858] name failslab, interval 1, probability 0, space 0, times 0 [ 166.276918][ T6858] CPU: 1 UID: 0 PID: 6858 Comm: syz.2.211 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 166.276957][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 166.276973][ T6858] Call Trace: [ 166.276981][ T6858] [ 166.276992][ T6858] dump_stack_lvl+0x16c/0x1f0 [ 166.277030][ T6858] should_fail_ex+0x512/0x640 [ 166.277068][ T6858] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 166.277101][ T6858] should_failslab+0xc2/0x120 [ 166.277134][ T6858] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 166.277167][ T6858] ? __alloc_skb+0x2b2/0x380 [ 166.277211][ T6858] __alloc_skb+0x2b2/0x380 [ 166.277251][ T6858] ? __pfx___alloc_skb+0x10/0x10 [ 166.277300][ T6858] ? __local_bh_enable_ip+0xa4/0x120 [ 166.277332][ T6858] ? lockdep_hardirqs_on+0x7c/0x110 [ 166.277363][ T6858] ? __dev_queue_xmit+0x896/0x43e0 [ 166.277400][ T6858] ? __local_bh_enable_ip+0xa4/0x120 [ 166.277430][ T6858] ? __dev_queue_xmit+0x896/0x43e0 [ 166.277466][ T6858] ? __dev_queue_xmit+0x8b7/0x43e0 [ 166.277508][ T6858] alloc_skb_with_frags+0xe0/0x860 [ 166.277549][ T6858] sock_alloc_send_pskb+0x7fb/0x990 [ 166.277599][ T6858] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 166.277640][ T6858] ? __lock_acquire+0x5ca/0x1ba0 [ 166.277680][ T6858] __ip6_append_data+0x2ac9/0x4710 [ 166.277716][ T6858] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 166.277756][ T6858] ? __pfx___ip6_append_data+0x10/0x10 [ 166.277786][ T6858] ? ip6_setup_cork+0xd01/0x15d0 [ 166.277815][ T6858] ip6_make_skb+0x2c8/0x3f0 [ 166.277846][ T6858] ? ip6_dst_check+0x343/0x940 [ 166.277887][ T6858] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 166.277919][ T6858] ? __pfx_ip6_make_skb+0x10/0x10 [ 166.277949][ T6858] ? find_held_lock+0x2b/0x80 [ 166.277982][ T6858] ? sk_dst_check+0x1da/0x540 [ 166.278031][ T6858] ? udpv6_sendmsg+0x24fe/0x3070 [ 166.278065][ T6858] udpv6_sendmsg+0x24fe/0x3070 [ 166.278105][ T6858] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 166.278142][ T6858] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 166.278177][ T6858] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 166.278207][ T6858] ? __lock_acquire+0x5ca/0x1ba0 [ 166.278292][ T6858] ? __pfx_aa_sk_perm+0x10/0x10 [ 166.278326][ T6858] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 166.278365][ T6858] ? inet6_sendmsg+0x105/0x140 [ 166.278399][ T6858] inet6_sendmsg+0x105/0x140 [ 166.278460][ T6858] ____sys_sendmsg+0x705/0xc70 [ 166.278519][ T6858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.278564][ T6858] ? kfree+0x252/0x4d0 [ 166.278606][ T6858] ? __pfx__kstrtoull+0x10/0x10 [ 166.278648][ T6858] ___sys_sendmsg+0x134/0x1d0 [ 166.278680][ T6858] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.278745][ T6858] ? __pfx___might_resched+0x10/0x10 [ 166.278786][ T6858] __sys_sendmmsg+0x200/0x420 [ 166.278819][ T6858] ? __pfx___sys_sendmmsg+0x10/0x10 [ 166.278858][ T6858] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 166.278910][ T6858] ? fput+0x70/0xf0 [ 166.278944][ T6858] ? ksys_write+0x1b9/0x240 [ 166.278968][ T6858] ? __pfx_ksys_write+0x10/0x10 [ 166.278991][ T6858] ? rcu_is_watching+0x12/0xc0 [ 166.279023][ T6858] __x64_sys_sendmmsg+0x9c/0x100 [ 166.279053][ T6858] ? lockdep_hardirqs_on+0x7c/0x110 [ 166.279088][ T6858] do_syscall_64+0xcd/0x230 [ 166.279128][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.279159][ T6858] RIP: 0033:0x7f954498e969 [ 166.279184][ T6858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.279213][ T6858] RSP: 002b:00007f95427f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 166.279243][ T6858] RAX: ffffffffffffffda RBX: 00007f9544bb5fa0 RCX: 00007f954498e969 [ 166.279269][ T6858] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 166.279285][ T6858] RBP: 00007f95427f6090 R08: 0000000000000000 R09: 0000000000000000 [ 166.279299][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.279315][ T6858] R13: 0000000000000000 R14: 00007f9544bb5fa0 R15: 00007fff545b3438 [ 166.279353][ T6858] [ 166.668819][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.350154][ T6847] syz.0.208 (6847) used greatest stack depth: 21400 bytes left [ 167.371727][ T6862] FAULT_INJECTION: forcing a failure. [ 167.371727][ T6862] name failslab, interval 1, probability 0, space 0, times 0 [ 167.397812][ T6862] CPU: 1 UID: 0 PID: 6862 Comm: syz.2.212 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 167.397856][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 167.397874][ T6862] Call Trace: [ 167.397883][ T6862] [ 167.397895][ T6862] dump_stack_lvl+0x16c/0x1f0 [ 167.397938][ T6862] should_fail_ex+0x512/0x640 [ 167.397981][ T6862] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 167.398021][ T6862] should_failslab+0xc2/0x120 [ 167.398058][ T6862] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 167.398092][ T6862] ? __kernfs_new_node+0xd2/0x8a0 [ 167.398158][ T6862] __kernfs_new_node+0xd2/0x8a0 [ 167.398215][ T6862] ? __pfx___kernfs_new_node+0x10/0x10 [ 167.398262][ T6862] ? find_held_lock+0x2b/0x80 [ 167.398286][ T6862] ? kernfs_root+0xee/0x2a0 [ 167.398330][ T6862] kernfs_new_node+0x13c/0x1e0 [ 167.398362][ T6862] __kernfs_create_file+0x53/0x350 [ 167.398398][ T6862] sysfs_add_file_mode_ns+0x207/0x3c0 [ 167.398444][ T6862] internal_create_group+0x578/0xf30 [ 167.398492][ T6862] ? __pfx_internal_create_group+0x10/0x10 [ 167.398537][ T6862] ? kernfs_create_link+0x1bd/0x240 [ 167.398574][ T6862] internal_create_groups+0x9d/0x150 [ 167.398600][ T6862] device_add+0xf30/0x1a70 [ 167.398636][ T6862] ? __pfx_device_add+0x10/0x10 [ 167.398668][ T6862] ? lockdep_init_map_type+0x5c/0x280 [ 167.398701][ T6862] ? __init_waitqueue_head+0xca/0x150 [ 167.398746][ T6862] netdev_register_kobject+0x182/0x3a0 [ 167.398779][ T6862] register_netdevice+0x13dc/0x2270 [ 167.398812][ T6862] ? __pfx_register_netdevice+0x10/0x10 [ 167.398846][ T6862] ? alloc_netdev_mqs+0xe7e/0x1570 [ 167.398874][ T6862] ? __pfx_loopback_net_init+0x10/0x10 [ 167.398904][ T6862] register_netdev+0x34/0x50 [ 167.398929][ T6862] loopback_net_init+0x7a/0x170 [ 167.398961][ T6862] ? __pfx_loopback_net_init+0x10/0x10 [ 167.398989][ T6862] ops_init+0x1df/0x5f0 [ 167.399017][ T6862] setup_net+0x21e/0x850 [ 167.399045][ T6862] ? __pfx_setup_net+0x10/0x10 [ 167.399068][ T6862] ? lockdep_init_map_type+0x5c/0x280 [ 167.399099][ T6862] ? __pfx_down_read_killable+0x10/0x10 [ 167.399138][ T6862] ? debug_mutex_init+0x37/0x70 [ 167.399181][ T6862] copy_net_ns+0x2a6/0x5f0 [ 167.399217][ T6862] create_new_namespaces+0x3ea/0xad0 [ 167.399253][ T6862] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 167.399283][ T6862] ksys_unshare+0x45b/0xa40 [ 167.399317][ T6862] ? __pfx_ksys_unshare+0x10/0x10 [ 167.399349][ T6862] ? xfd_validate_state+0x5d/0x180 [ 167.399390][ T6862] ? rcu_is_watching+0x12/0xc0 [ 167.399420][ T6862] __x64_sys_unshare+0x31/0x40 [ 167.399452][ T6862] do_syscall_64+0xcd/0x230 [ 167.399485][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.399510][ T6862] RIP: 0033:0x7f954498e969 [ 167.399528][ T6862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.399552][ T6862] RSP: 002b:00007f95427f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 167.399575][ T6862] RAX: ffffffffffffffda RBX: 00007f9544bb5fa0 RCX: 00007f954498e969 [ 167.399591][ T6862] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 167.399605][ T6862] RBP: 00007f9544a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 167.399620][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.399634][ T6862] R13: 0000000000000000 R14: 00007f9544bb5fa0 R15: 00007fff545b3438 [ 167.399665][ T6862] [ 167.734501][ C1] vkms_vblank_simulate: vblank timer overrun [ 169.313814][ T6884] FAULT_INJECTION: forcing a failure. [ 169.313814][ T6884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.366690][ T6884] CPU: 0 UID: 0 PID: 6884 Comm: syz.0.220 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 169.366729][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 169.366746][ T6884] Call Trace: [ 169.366754][ T6884] [ 169.366765][ T6884] dump_stack_lvl+0x16c/0x1f0 [ 169.366806][ T6884] should_fail_ex+0x512/0x640 [ 169.366853][ T6884] _copy_from_user+0x2e/0xd0 [ 169.366900][ T6884] ____sys_sendmsg+0x607/0xc70 [ 169.366942][ T6884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.366986][ T6884] ? kfree+0x252/0x4d0 [ 169.367038][ T6884] ? __pfx__kstrtoull+0x10/0x10 [ 169.367081][ T6884] ___sys_sendmsg+0x134/0x1d0 [ 169.367112][ T6884] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.367177][ T6884] ? __pfx___might_resched+0x10/0x10 [ 169.367221][ T6884] __sys_sendmmsg+0x200/0x420 [ 169.367255][ T6884] ? __pfx___sys_sendmmsg+0x10/0x10 [ 169.367297][ T6884] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.367363][ T6884] ? fput+0x70/0xf0 [ 169.367395][ T6884] ? ksys_write+0x1b9/0x240 [ 169.367438][ T6884] ? __pfx_ksys_write+0x10/0x10 [ 169.367463][ T6884] ? rcu_is_watching+0x12/0xc0 [ 169.367497][ T6884] __x64_sys_sendmmsg+0x9c/0x100 [ 169.367526][ T6884] ? lockdep_hardirqs_on+0x7c/0x110 [ 169.367559][ T6884] do_syscall_64+0xcd/0x230 [ 169.367600][ T6884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.367630][ T6884] RIP: 0033:0x7f5f2198e969 [ 169.367654][ T6884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.367682][ T6884] RSP: 002b:00007f5f227ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 169.367709][ T6884] RAX: ffffffffffffffda RBX: 00007f5f21bb5fa0 RCX: 00007f5f2198e969 [ 169.367727][ T6884] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 169.367744][ T6884] RBP: 00007f5f227ed090 R08: 0000000000000000 R09: 0000000000000000 [ 169.367761][ T6884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.367778][ T6884] R13: 0000000000000000 R14: 00007f5f21bb5fa0 R15: 00007ffd13c1e368 [ 169.367817][ T6884] [ 169.623724][ T6881] FAULT_INJECTION: forcing a failure. [ 169.623724][ T6881] name fail_futex, interval 1, probability 0, space 0, times 1 [ 169.649805][ T6881] CPU: 1 UID: 0 PID: 6881 Comm: syz.1.219 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 169.649849][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 169.649867][ T6881] Call Trace: [ 169.649877][ T6881] [ 169.649888][ T6881] dump_stack_lvl+0x16c/0x1f0 [ 169.649931][ T6881] should_fail_ex+0x512/0x640 [ 169.649978][ T6881] get_futex_key+0x49e/0x1000 [ 169.650012][ T6881] ? __pfx_get_futex_key+0x10/0x10 [ 169.650054][ T6881] futex_wake+0xe7/0x4e0 [ 169.650094][ T6881] ? __pfx_futex_wake+0x10/0x10 [ 169.650149][ T6881] ? rcu_is_watching+0x12/0xc0 [ 169.650194][ T6881] do_futex+0x1e3/0x350 [ 169.650228][ T6881] ? __pfx_do_futex+0x10/0x10 [ 169.650264][ T6881] ? __pfx___might_resched+0x10/0x10 [ 169.650303][ T6881] __x64_sys_futex+0x1e0/0x4c0 [ 169.650349][ T6881] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 169.650404][ T6881] ? __pfx___x64_sys_futex+0x10/0x10 [ 169.650453][ T6881] do_syscall_64+0xcd/0x230 [ 169.650495][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.650527][ T6881] RIP: 0033:0x7fdea058e969 [ 169.650552][ T6881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.650583][ T6881] RSP: 002b:00007fdea13e70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 169.650612][ T6881] RAX: ffffffffffffffda RBX: 00007fdea07b5fa8 RCX: 00007fdea058e969 [ 169.650633][ T6881] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fdea07b5fac [ 169.650653][ T6881] RBP: 00007fdea07b5fa0 R08: 00007fdea13e8000 R09: 0000000000000000 [ 169.650673][ T6881] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fdea07b5fac [ 169.650693][ T6881] R13: 0000000000000000 R14: 00007ffcf51c92c0 R15: 00007ffcf51c93a8 [ 169.650733][ T6881] [ 170.819338][ T6891] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 170.825689][ T6891] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.843810][ T6891] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 170.864265][ T6891] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.857295][ T6917] FAULT_INJECTION: forcing a failure. [ 171.857295][ T6917] name failslab, interval 1, probability 0, space 0, times 0 [ 171.877204][ T6917] CPU: 0 UID: 0 PID: 6917 Comm: syz.0.228 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 171.877243][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 171.877256][ T6917] Call Trace: [ 171.877263][ T6917] [ 171.877271][ T6917] dump_stack_lvl+0x16c/0x1f0 [ 171.877304][ T6917] should_fail_ex+0x512/0x640 [ 171.877335][ T6917] ? __kmalloc_noprof+0xbf/0x510 [ 171.877361][ T6917] ? constrain_params_by_rules+0x175/0xca0 [ 171.877389][ T6917] should_failslab+0xc2/0x120 [ 171.877417][ T6917] __kmalloc_noprof+0xd2/0x510 [ 171.877451][ T6917] ? do_raw_spin_lock+0x12c/0x2b0 [ 171.877488][ T6917] constrain_params_by_rules+0x175/0xca0 [ 171.877520][ T6917] ? mark_held_locks+0x49/0x80 [ 171.877548][ T6917] ? lockdep_hardirqs_on+0x7c/0x110 [ 171.877578][ T6917] ? stack_depot_save_flags+0x3e6/0xa50 [ 171.877614][ T6917] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 171.877650][ T6917] ? __kasan_kmalloc+0xaa/0xb0 [ 171.877670][ T6917] ? snd_pcm_oss_change_params_locked+0x247/0x3b40 [ 171.877699][ T6917] ? snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 171.877727][ T6917] ? snd_pcm_oss_get_formats+0x7e/0x340 [ 171.877763][ T6917] ? rcu_is_watching+0x12/0xc0 [ 171.877782][ T6917] ? snd_interval_refine+0x2fa/0x580 [ 171.877830][ T6917] snd_pcm_hw_refine+0x7de/0xad0 [ 171.877865][ T6917] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 171.877904][ T6917] ? __asan_memset+0x23/0x50 [ 171.877938][ T6917] ? _snd_pcm_hw_param_min+0x259/0x630 [ 171.877970][ T6917] snd_pcm_oss_change_params_locked+0x65e/0x3b40 [ 171.878003][ T6917] ? rcu_is_watching+0x12/0xc0 [ 171.878025][ T6917] ? lockdep_hardirqs_on+0x7c/0x110 [ 171.878053][ T6917] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 171.878084][ T6917] ? __pfx___mutex_lock+0x10/0x10 [ 171.878110][ T6917] ? tomoyo_path_number_perm+0x295/0x580 [ 171.878154][ T6917] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 171.878188][ T6917] snd_pcm_oss_get_formats+0x7e/0x340 [ 171.878215][ T6917] ? find_held_lock+0x2b/0x80 [ 171.878235][ T6917] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 171.878262][ T6917] ? __might_fault+0x13b/0x190 [ 171.878294][ T6917] snd_pcm_oss_ioctl+0x2efb/0x37a0 [ 171.878323][ T6917] ? find_held_lock+0x2b/0x80 [ 171.878342][ T6917] ? hook_file_ioctl_common+0x145/0x410 [ 171.878367][ T6917] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 171.878399][ T6917] ? __fget_files+0x20e/0x3c0 [ 171.878437][ T6917] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 171.878467][ T6917] __x64_sys_ioctl+0x190/0x200 [ 171.878499][ T6917] do_syscall_64+0xcd/0x230 [ 171.878529][ T6917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.878551][ T6917] RIP: 0033:0x7f5f2198e969 [ 171.878570][ T6917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.878592][ T6917] RSP: 002b:00007f5f227cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.878612][ T6917] RAX: ffffffffffffffda RBX: 00007f5f21bb6080 RCX: 00007f5f2198e969 [ 171.878627][ T6917] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 000000000000000c [ 171.878639][ T6917] RBP: 00007f5f21a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 171.878652][ T6917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.878665][ T6917] R13: 0000000000000000 R14: 00007f5f21bb6080 R15: 00007ffd13c1e368 [ 171.878693][ T6917] [ 172.210825][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.386639][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.856840][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 172.864424][ T56] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.937695][ T56] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.378076][ T6926] could not allocate digest TFM handle [ 174.659160][ T6953] ubi: mtd0 is already attached to ubi0 [ 174.895201][ T6953] Invalid ELF header magic: != ELF [ 175.607098][ T6969] ======================================================= [ 175.607098][ T6969] WARNING: The mand mount option has been deprecated and [ 175.607098][ T6969] and is ignored by this kernel. Remove the mand [ 175.607098][ T6969] option from the mount to silence this warning. [ 175.607098][ T6969] ======================================================= [ 177.162254][ T7002] netlink: 338 bytes leftover after parsing attributes in process `syz.2.249'. [ 177.598806][ T56] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 178.740254][ T7021] netlink: set zone limit has 8 unknown bytes [ 178.786414][ T7037] usb usb34: usbfs: process 7037 (syz.1.252) did not claim interface 0 before use [ 178.829818][ T7021] netlink: set zone limit has 8 unknown bytes [ 178.872081][ T7021] netlink: set zone limit has 8 unknown bytes [ 178.897518][ T7017] usb usb34: usbfs: process 7017 (syz.1.252) did not claim interface 0 before use [ 178.920296][ T7021] netlink: set zone limit has 8 unknown bytes [ 178.963840][ T7021] netlink: set zone limit has 8 unknown bytes [ 179.014209][ T7021] netlink: set zone limit has 8 unknown bytes [ 179.059246][ T7021] netlink: set zone limit has 8 unknown bytes [ 179.105876][ T7021] netlink: set zone limit has 8 unknown bytes [ 179.392209][ T30] audit: type=1326 audit(6040824922.991:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.0.256" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f2198e969 code=0x0 [ 179.818039][ T7055] openvswitch: netlink: Key 5 has unexpected len 4 expected 2 [ 180.206721][ T7055] bond0: option all_slaves_active: invalid value () [ 180.213645][ T7063] ubi: mtd0 is already attached to ubi0 [ 180.316343][ T7063] Invalid ELF header magic: != ELF [ 183.119156][ T7104] could not allocate digest TFM handle [ 183.180409][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 183.199271][ T7112] netlink: 354 bytes leftover after parsing attributes in process `syz.0.274'. [ 183.220295][ T7104] netlink: 338 bytes leftover after parsing attributes in process `syz.2.272'. [ 183.393508][ T7104] veth1_macvtap: left promiscuous mode [ 183.401368][ T7104] macsec0: entered allmulticast mode [ 184.681842][ T7131] FAULT_INJECTION: forcing a failure. [ 184.681842][ T7131] name failslab, interval 1, probability 0, space 0, times 0 [ 184.694817][ T7131] CPU: 1 UID: 0 PID: 7131 Comm: syz.1.280 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 184.694852][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 184.694865][ T7131] Call Trace: [ 184.694873][ T7131] [ 184.694881][ T7131] dump_stack_lvl+0x16c/0x1f0 [ 184.694913][ T7131] should_fail_ex+0x512/0x640 [ 184.694950][ T7131] should_failslab+0xc2/0x120 [ 184.694979][ T7131] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 184.695024][ T7131] ? __alloc_skb+0x2b2/0x380 [ 184.695062][ T7131] ? do_csum+0x26f/0x2d0 [ 184.695087][ T7131] __alloc_skb+0x2b2/0x380 [ 184.695125][ T7131] ? __pfx___alloc_skb+0x10/0x10 [ 184.695162][ T7131] ? skb_copy_and_csum_bits+0x127/0x920 [ 184.695189][ T7131] ? __asan_memcpy+0x3c/0x60 [ 184.695232][ T7131] skb_segment+0x9d7/0x3ef0 [ 184.695299][ T7131] ? __pfx_skb_segment+0x10/0x10 [ 184.695337][ T7131] __udp_gso_segment+0x1487/0x2290 [ 184.695364][ T7131] ? __pfx_sock_wfree+0x10/0x10 [ 184.695411][ T7131] udp6_ufo_fragment+0xa54/0xce0 [ 184.695449][ T7131] ? __pfx_udp6_ufo_fragment+0x10/0x10 [ 184.695485][ T7131] ? ___sys_sendmsg+0x134/0x1d0 [ 184.695504][ T7131] ? __x64_sys_sendmmsg+0x9c/0x100 [ 184.695533][ T7131] ipv6_gso_segment+0x810/0x1db0 [ 184.695580][ T7131] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 184.695616][ T7131] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 184.695651][ T7131] skb_mac_gso_segment+0x2a5/0x650 [ 184.695677][ T7131] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 184.695711][ T7131] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 184.695739][ T7131] ? __lock_acquire+0x5ca/0x1ba0 [ 184.695791][ T7131] __skb_gso_segment+0x36e/0x700 [ 184.695822][ T7131] validate_xmit_skb+0x956/0xfe0 [ 184.695862][ T7131] __dev_queue_xmit+0x71b/0x43e0 [ 184.695911][ T7131] ? __pfx___dev_queue_xmit+0x10/0x10 [ 184.695957][ T7131] ? __lock_acquire+0xaa4/0x1ba0 [ 184.696000][ T7131] ? __lock_acquire+0x5ca/0x1ba0 [ 184.696038][ T7131] ? find_held_lock+0x2b/0x80 [ 184.696067][ T7131] neigh_connected_output+0x3da/0x620 [ 184.696102][ T7131] ip6_finish_output2+0xaeb/0x2020 [ 184.696158][ T7131] ip6_finish_output+0x3f9/0x1360 [ 184.696191][ T7131] ip6_output+0x1f9/0x540 [ 184.696217][ T7131] ? __pfx_ip6_output+0x10/0x10 [ 184.696255][ T7131] ip6_local_out+0xcd/0x4a0 [ 184.696290][ T7131] ip6_send_skb+0x112/0x460 [ 184.696317][ T7131] udp_v6_send_skb+0x96f/0x1910 [ 184.696360][ T7131] udpv6_sendmsg+0x254a/0x3070 [ 184.696392][ T7131] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 184.696424][ T7131] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 184.696453][ T7131] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 184.696487][ T7131] ? __lock_acquire+0x5ca/0x1ba0 [ 184.696561][ T7131] ? __pfx_aa_sk_perm+0x10/0x10 [ 184.696596][ T7131] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 184.696636][ T7131] ? inet6_sendmsg+0x105/0x140 [ 184.696674][ T7131] inet6_sendmsg+0x105/0x140 [ 184.696709][ T7131] ____sys_sendmsg+0x705/0xc70 [ 184.696742][ T7131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.696776][ T7131] ? kfree+0x252/0x4d0 [ 184.696809][ T7131] ? __pfx__kstrtoull+0x10/0x10 [ 184.696841][ T7131] ___sys_sendmsg+0x134/0x1d0 [ 184.696864][ T7131] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.696915][ T7131] ? __pfx___might_resched+0x10/0x10 [ 184.696947][ T7131] __sys_sendmmsg+0x200/0x420 [ 184.696973][ T7131] ? __pfx___sys_sendmmsg+0x10/0x10 [ 184.697005][ T7131] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 184.697048][ T7131] ? fput+0x70/0xf0 [ 184.697074][ T7131] ? ksys_write+0x1b9/0x240 [ 184.697094][ T7131] ? __pfx_ksys_write+0x10/0x10 [ 184.697113][ T7131] ? rcu_is_watching+0x12/0xc0 [ 184.697139][ T7131] __x64_sys_sendmmsg+0x9c/0x100 [ 184.697160][ T7131] ? lockdep_hardirqs_on+0x7c/0x110 [ 184.697186][ T7131] do_syscall_64+0xcd/0x230 [ 184.697216][ T7131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.697239][ T7131] RIP: 0033:0x7fdea058e969 [ 184.697258][ T7131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.697279][ T7131] RSP: 002b:00007fdea13e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 184.697306][ T7131] RAX: ffffffffffffffda RBX: 00007fdea07b5fa0 RCX: 00007fdea058e969 [ 184.697321][ T7131] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 184.697334][ T7131] RBP: 00007fdea13e7090 R08: 0000000000000000 R09: 0000000000000000 [ 184.697348][ T7131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.697360][ T7131] R13: 0000000000000000 R14: 00007fdea07b5fa0 R15: 00007ffcf51c93a8 [ 184.697390][ T7131] [ 186.500733][ T7159] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0x2a3 pfn:0x78920 [ 186.559881][ T7159] memcg:ffff888024b28000 [ 186.595315][ T7159] anon flags: 0xfff00000020808(uptodate|owner_2|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 186.715666][ T7159] raw: 00fff00000020808 ffffea00016466c8 ffffea0001e24848 ffff88803395ccc1 [ 186.724868][ T7159] raw: 00000000000002a3 0000000000000000 0000000200000000 ffff888024b28000 [ 186.746953][ T7159] page dumped because: unmovable page [ 186.752392][ T7159] page_owner tracks the page as allocated [ 186.777491][ T7159] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7081, tgid 7081 (syz.3.267), ts 186544623883, free_ts 186532732247 [ 186.843350][ T7159] post_alloc_hook+0x181/0x1b0 [ 186.879411][ T7159] get_page_from_freelist+0x135c/0x3920 [ 186.926331][ T7159] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 186.983325][ T7159] alloc_pages_mpol+0x1fb/0x550 [ 187.037242][ T7160] could not allocate digest TFM handle binfmt_misc [ 187.044295][ T7159] folio_alloc_mpol_noprof+0x36/0x2f0 [ 187.080468][ T7159] shmem_alloc_folio+0x135/0x160 [ 187.085527][ T7159] shmem_alloc_and_add_folio+0x499/0xc20 [ 187.238616][ T7159] shmem_get_folio_gfp+0x687/0x1530 [ 187.261728][ T7159] shmem_fault+0x1fe/0xa30 [ 187.280054][ T7159] __do_fault+0x10a/0x490 [ 187.284471][ T7159] do_pte_missing+0x1031/0x3fb0 [ 187.321191][ T7159] __handle_mm_fault+0x103d/0x2a40 [ 187.342228][ T7159] handle_mm_fault+0x3fe/0xad0 [ 187.347689][ T7159] __get_user_pages+0x771/0x36f0 [ 187.373190][ T7159] get_dump_page+0x257/0x3d0 [ 187.386650][ T7159] dump_user_range+0x1c3/0xb30 [ 187.391517][ T7159] page last free pid 7157 tgid 7149 stack trace: [ 187.459940][ T7159] free_unref_folios+0x999/0x1630 [ 187.481862][ T7159] shrink_folio_list+0x3255/0x40e0 [ 187.527029][ T7159] reclaim_folio_list+0xd7/0x5d0 [ 187.532064][ T7159] reclaim_pages+0x47b/0x650 [ 187.604712][ T7159] madvise_cold_or_pageout_pte_range+0x13a9/0x20f0 [ 187.616524][ T7159] walk_pgd_range+0xba7/0x1a90 [ 187.621372][ T7159] __walk_page_range+0x163/0x820 [ 187.666587][ T7159] walk_page_range_mm+0x54d/0x8a0 [ 187.702341][ T7159] walk_page_range+0x63/0x90 [ 187.736971][ T7159] madvise_pageout+0x316/0x800 [ 187.742478][ T7159] madvise_vma_behavior+0x416/0x1d50 [ 187.784932][ T7159] madvise_walk_vmas+0x1ce/0x2c0 [ 187.803892][ T7159] madvise_do_behavior+0x12b/0x3b0 [ 187.838143][ T7159] do_madvise+0x10b/0x170 [ 187.848809][ T7159] __x64_sys_madvise+0xa9/0x110 [ 187.869573][ T7159] do_syscall_64+0xcd/0x230 [ 188.306230][ T7174] netlink: 338 bytes leftover after parsing attributes in process `syz.3.290'. [ 188.335177][ T7174] netlink: 338 bytes leftover after parsing attributes in process `syz.3.290'. [ 188.622910][ T7182] netlink: 342 bytes leftover after parsing attributes in process `syz.2.293'. [ 188.757578][ T7182] netlink: 342 bytes leftover after parsing attributes in process `syz.2.293'. [ 188.881647][ T7195] netlink: 346 bytes leftover after parsing attributes in process `syz.0.295'. [ 189.439760][ T7191] Invalid ELF header magic: != ELF [ 190.838527][ T7221] FAULT_INJECTION: forcing a failure. [ 190.838527][ T7221] name failslab, interval 1, probability 0, space 0, times 0 [ 190.851365][ T7221] CPU: 1 UID: 0 PID: 7221 Comm: syz.3.302 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 190.851398][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 190.851413][ T7221] Call Trace: [ 190.851422][ T7221] [ 190.851432][ T7221] dump_stack_lvl+0x16c/0x1f0 [ 190.851469][ T7221] should_fail_ex+0x512/0x640 [ 190.851511][ T7221] should_failslab+0xc2/0x120 [ 190.851544][ T7221] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 190.851575][ T7221] ? __alloc_skb+0x2b2/0x380 [ 190.851615][ T7221] ? do_csum+0x26f/0x2d0 [ 190.851661][ T7221] __alloc_skb+0x2b2/0x380 [ 190.851708][ T7221] ? __pfx___alloc_skb+0x10/0x10 [ 190.851751][ T7221] ? skb_copy_and_csum_bits+0x127/0x920 [ 190.851785][ T7221] ? __asan_memcpy+0x3c/0x60 [ 190.851839][ T7221] skb_segment+0x9d7/0x3ef0 [ 190.851924][ T7221] ? __pfx_skb_segment+0x10/0x10 [ 190.851974][ T7221] __udp_gso_segment+0x1487/0x2290 [ 190.852010][ T7221] ? __pfx_sock_wfree+0x10/0x10 [ 190.852081][ T7221] udp6_ufo_fragment+0xa54/0xce0 [ 190.852128][ T7221] ? __pfx_udp6_ufo_fragment+0x10/0x10 [ 190.852162][ T7221] ? ___sys_sendmsg+0x134/0x1d0 [ 190.852187][ T7221] ? __x64_sys_sendmmsg+0x9c/0x100 [ 190.852223][ T7221] ipv6_gso_segment+0x810/0x1db0 [ 190.852278][ T7221] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 190.852322][ T7221] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.852365][ T7221] skb_mac_gso_segment+0x2a5/0x650 [ 190.852395][ T7221] ? __pfx_ipv6_gso_segment+0x10/0x10 [ 190.852437][ T7221] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 190.852470][ T7221] ? __lock_acquire+0x5ca/0x1ba0 [ 190.852511][ T7221] __skb_gso_segment+0x36e/0x700 [ 190.852547][ T7221] validate_xmit_skb+0x956/0xfe0 [ 190.852595][ T7221] __dev_queue_xmit+0x71b/0x43e0 [ 190.852651][ T7221] ? __pfx___dev_queue_xmit+0x10/0x10 [ 190.852706][ T7221] ? __lock_acquire+0xaa4/0x1ba0 [ 190.852746][ T7221] ? __lock_acquire+0x5ca/0x1ba0 [ 190.852794][ T7221] ? find_held_lock+0x2b/0x80 [ 190.852830][ T7221] neigh_connected_output+0x3da/0x620 [ 190.852873][ T7221] ip6_finish_output2+0xaeb/0x2020 [ 190.852926][ T7221] ip6_finish_output+0x3f9/0x1360 [ 190.852965][ T7221] ip6_output+0x1f9/0x540 [ 190.852996][ T7221] ? __pfx_ip6_output+0x10/0x10 [ 190.853029][ T7221] ip6_local_out+0xcd/0x4a0 [ 190.853071][ T7221] ip6_send_skb+0x112/0x460 [ 190.853105][ T7221] udp_v6_send_skb+0x96f/0x1910 [ 190.853158][ T7221] udpv6_sendmsg+0x254a/0x3070 [ 190.853198][ T7221] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 190.853239][ T7221] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 190.853276][ T7221] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 190.853308][ T7221] ? __lock_acquire+0x5ca/0x1ba0 [ 190.853409][ T7221] ? __pfx_aa_sk_perm+0x10/0x10 [ 190.853445][ T7221] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 190.853487][ T7221] ? inet6_sendmsg+0x105/0x140 [ 190.853525][ T7221] inet6_sendmsg+0x105/0x140 [ 190.853569][ T7221] ____sys_sendmsg+0x705/0xc70 [ 190.853609][ T7221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.853651][ T7221] ? kfree+0x252/0x4d0 [ 190.853691][ T7221] ? __pfx__kstrtoull+0x10/0x10 [ 190.853731][ T7221] ___sys_sendmsg+0x134/0x1d0 [ 190.853760][ T7221] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.853825][ T7221] ? __pfx___might_resched+0x10/0x10 [ 190.853865][ T7221] __sys_sendmmsg+0x200/0x420 [ 190.853897][ T7221] ? __pfx___sys_sendmmsg+0x10/0x10 [ 190.853944][ T7221] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.853997][ T7221] ? fput+0x70/0xf0 [ 190.854029][ T7221] ? ksys_write+0x1b9/0x240 [ 190.854055][ T7221] ? __pfx_ksys_write+0x10/0x10 [ 190.854078][ T7221] ? rcu_is_watching+0x12/0xc0 [ 190.854115][ T7221] __x64_sys_sendmmsg+0x9c/0x100 [ 190.854142][ T7221] ? lockdep_hardirqs_on+0x7c/0x110 [ 190.854176][ T7221] do_syscall_64+0xcd/0x230 [ 190.854214][ T7221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.854243][ T7221] RIP: 0033:0x7f529398e969 [ 190.854266][ T7221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.854293][ T7221] RSP: 002b:00007f5294741038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 190.854319][ T7221] RAX: ffffffffffffffda RBX: 00007f5293bb5fa0 RCX: 00007f529398e969 [ 190.854338][ T7221] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 190.854356][ T7221] RBP: 00007f5294741090 R08: 0000000000000000 R09: 0000000000000000 [ 190.854374][ T7221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.854390][ T7221] R13: 0000000000000000 R14: 00007f5293bb5fa0 R15: 00007ffcee6cda08 [ 190.854429][ T7221] [ 191.290039][ C1] vkms_vblank_simulate: vblank timer overrun [ 191.953086][ T7232] snd_aloop snd_aloop.0: control 1:6:-2147483647:¢¸è_ÅheºRŸª:265 is already present [ 192.174423][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.307'. [ 192.319755][ T7244] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 192.355548][ T7240] netlink: 346 bytes leftover after parsing attributes in process `syz.1.308'. [ 193.004059][ T7236] Invalid ELF header magic: != ELF [ 194.195128][ T7275] FAULT_INJECTION: forcing a failure. [ 194.195128][ T7275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.283003][ T7275] CPU: 1 UID: 0 PID: 7275 Comm: syz.3.314 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 194.283042][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 194.283058][ T7275] Call Trace: [ 194.283066][ T7275] [ 194.283076][ T7275] dump_stack_lvl+0x16c/0x1f0 [ 194.283116][ T7275] should_fail_ex+0x512/0x640 [ 194.283161][ T7275] _copy_from_user+0x2e/0xd0 [ 194.283202][ T7275] kstrtouint_from_user+0xd6/0x1d0 [ 194.283237][ T7275] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 194.283269][ T7275] ? __lock_acquire+0xaa4/0x1ba0 [ 194.283326][ T7275] proc_fail_nth_write+0x83/0x250 [ 194.283369][ T7275] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 194.283424][ T7275] vfs_write+0x25c/0x1180 [ 194.283450][ T7275] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 194.283514][ T7275] ? __pfx___mutex_lock+0x10/0x10 [ 194.283551][ T7275] ? __pfx_vfs_write+0x10/0x10 [ 194.283589][ T7275] ? __fget_files+0x20e/0x3c0 [ 194.283646][ T7275] ksys_write+0x12a/0x240 [ 194.283674][ T7275] ? __pfx_ksys_write+0x10/0x10 [ 194.283699][ T7275] ? rcu_is_watching+0x12/0xc0 [ 194.283739][ T7275] do_syscall_64+0xcd/0x230 [ 194.283780][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.283809][ T7275] RIP: 0033:0x7f529398d41f [ 194.283833][ T7275] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 194.283861][ T7275] RSP: 002b:00007f5294741030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 194.283895][ T7275] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f529398d41f [ 194.283913][ T7275] RDX: 0000000000000001 RSI: 00007f52947410a0 RDI: 0000000000000004 [ 194.283931][ T7275] RBP: 00007f5294741090 R08: 0000000000000000 R09: 0000000000000000 [ 194.283949][ T7275] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 194.283965][ T7275] R13: 0000000000000000 R14: 00007f5293bb5fa0 R15: 00007ffcee6cda08 [ 194.284005][ T7275] [ 194.477658][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.286147][ T7286] could not allocate digest TFM handle [ 197.155986][ T7309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.321'. [ 197.218399][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.391412][ T7309] bridge_slave_1 (unregistering): left allmulticast mode [ 197.409817][ T7309] bridge_slave_1 (unregistering): left promiscuous mode [ 197.423828][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.591676][ T7315] netlink: 346 bytes leftover after parsing attributes in process `syz.3.322'. [ 197.877244][ T7314] Invalid ELF header magic: != ELF [ 199.421942][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.428375][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.316735][ T7354] could not allocate digest TFM handle [ 200.433666][ T7348] netlink: 'syz.1.331': attribute type 10 has an invalid length. [ 200.466608][ T7348] netlink: 230 bytes leftover after parsing attributes in process `syz.1.331'. [ 200.567292][ T7348] team0: Port device team_slave_1 removed [ 201.723247][ T7385] FAULT_INJECTION: forcing a failure. [ 201.723247][ T7385] name failslab, interval 1, probability 0, space 0, times 0 [ 201.736973][ T7385] CPU: 0 UID: 0 PID: 7385 Comm: syz.2.340 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 201.737033][ T7385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 201.737051][ T7385] Call Trace: [ 201.737061][ T7385] [ 201.737072][ T7385] dump_stack_lvl+0x16c/0x1f0 [ 201.737114][ T7385] should_fail_ex+0x512/0x640 [ 201.737153][ T7385] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 201.737193][ T7385] should_failslab+0xc2/0x120 [ 201.737246][ T7385] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 201.737286][ T7385] ? setup_mq_sysctls+0x5d/0x230 [ 201.737336][ T7385] kmemdup_noprof+0x29/0x60 [ 201.737372][ T7385] setup_mq_sysctls+0x5d/0x230 [ 201.737428][ T7385] copy_ipcs+0x479/0x610 [ 201.737458][ T7385] ? copy_utsname+0xab/0x470 [ 201.737498][ T7385] create_new_namespaces+0x20a/0xad0 [ 201.737541][ T7385] ? security_capable+0x7e/0x260 [ 201.737593][ T7385] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 201.737628][ T7385] ksys_unshare+0x45b/0xa40 [ 201.737668][ T7385] ? __pfx_ksys_unshare+0x10/0x10 [ 201.737705][ T7385] ? xfd_validate_state+0x5d/0x180 [ 201.737753][ T7385] ? rcu_is_watching+0x12/0xc0 [ 201.737788][ T7385] __x64_sys_unshare+0x31/0x40 [ 201.737825][ T7385] do_syscall_64+0xcd/0x230 [ 201.737863][ T7385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.737892][ T7385] RIP: 0033:0x7f954498e969 [ 201.737916][ T7385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.737944][ T7385] RSP: 002b:00007f95427f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 201.737989][ T7385] RAX: ffffffffffffffda RBX: 00007f9544bb5fa0 RCX: 00007f954498e969 [ 201.738009][ T7385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 201.738052][ T7385] RBP: 00007f9544a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 201.738072][ T7385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.738090][ T7385] R13: 0000000000000000 R14: 00007f9544bb5fa0 R15: 00007fff545b3438 [ 201.738128][ T7385] [ 202.864288][ T7403] netlink: 504 bytes leftover after parsing attributes in process `syz.2.343'. [ 203.314544][ T7408] could not allocate digest TFM handle [ 203.860868][ T7426] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 203.867236][ T7426] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 203.888387][ T7426] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 203.895898][ T7426] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 203.936795][ T7426] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 204.253152][ T7432] Invalid ELF header magic: != ELF [ 204.427281][ T7410] netlink: 'syz.3.344': attribute type 10 has an invalid length. [ 204.445374][ T7410] netlink: 230 bytes leftover after parsing attributes in process `syz.3.344'. [ 204.537416][ T7410] team0: Port device team_slave_1 removed [ 205.732778][ T7432] tty tty34: ldisc open failed (-12), clearing slot 33 [ 205.896929][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.903743][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.909907][ T56] Bluetooth: hci1: command 0x0c1a tx timeout [ 205.915962][ T56] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.095456][ T7476] CIFS mount error: No usable UNC path provided in device string! [ 206.095456][ T7476] [ 206.131968][ T7476] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 206.444049][ T7475] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[7475] [ 206.847287][ T7478] FAULT_INJECTION: forcing a failure. [ 206.847287][ T7478] name failslab, interval 1, probability 0, space 0, times 0 [ 206.946657][ T7478] CPU: 0 UID: 0 PID: 7478 Comm: syz.3.360 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 206.946702][ T7478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 206.946720][ T7478] Call Trace: [ 206.946730][ T7478] [ 206.946752][ T7478] dump_stack_lvl+0x16c/0x1f0 [ 206.946797][ T7478] should_fail_ex+0x512/0x640 [ 206.946841][ T7478] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 206.946897][ T7478] should_failslab+0xc2/0x120 [ 206.946934][ T7478] __kmalloc_cache_noprof+0x6a/0x3e0 [ 206.946986][ T7478] ? drm_atomic_helper_setup_commit+0x73c/0x15d0 [ 206.947021][ T7478] ? drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 206.947063][ T7478] drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 206.947115][ T7478] drm_atomic_helper_commit+0xa9/0x380 [ 206.947150][ T7478] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 206.947184][ T7478] drm_atomic_commit+0x231/0x300 [ 206.947224][ T7478] ? __pfx_drm_atomic_commit+0x10/0x10 [ 206.947264][ T7478] ? __pfx___drm_printfn_info+0x10/0x10 [ 206.947317][ T7478] ? drm_client_rotation+0x4d9/0x6a0 [ 206.947360][ T7478] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 206.947413][ T7478] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 206.947498][ T7478] drm_client_modeset_commit_locked+0x14d/0x580 [ 206.947541][ T7478] drm_client_modeset_commit+0x4f/0x80 [ 206.947598][ T7478] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 206.947633][ T7478] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 206.947682][ T7478] drm_fbdev_client_restore+0x2c/0x40 [ 206.947727][ T7478] drm_client_dev_restore+0x1f3/0x2a0 [ 206.947772][ T7478] drm_release+0x2c4/0x360 [ 206.947837][ T7478] ? __pfx_drm_release+0x10/0x10 [ 206.947872][ T7478] __fput+0x3ff/0xb70 [ 206.947923][ T7478] task_work_run+0x14d/0x240 [ 206.947981][ T7478] ? __pfx_task_work_run+0x10/0x10 [ 206.948032][ T7478] ? __pfx___do_sys_close_range+0x10/0x10 [ 206.948062][ T7478] ? rcu_is_watching+0x12/0xc0 [ 206.948100][ T7478] syscall_exit_to_user_mode+0x27b/0x2a0 [ 206.948142][ T7478] do_syscall_64+0xda/0x230 [ 206.948185][ T7478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.948217][ T7478] RIP: 0033:0x7f529398e969 [ 206.948251][ T7478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.948283][ T7478] RSP: 002b:00007f5294741038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 206.948314][ T7478] RAX: 0000000000000000 RBX: 00007f5293bb5fa0 RCX: 00007f529398e969 [ 206.948335][ T7478] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 206.948353][ T7478] RBP: 00007f5293a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 206.948373][ T7478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.948397][ T7478] R13: 0000000000000000 R14: 00007f5293bb5fa0 R15: 00007ffcee6cda08 [ 206.948441][ T7478] [ 207.982489][ T56] Bluetooth: hci3: command 0x0c1a tx timeout [ 209.875523][ T7523] could not allocate digest TFM handle [ 209.894551][ T7522] could not allocate digest TFM handle [ 209.967280][ T7529] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 209.975288][ T7529] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 209.984080][ T7529] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 209.992204][ T7529] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.477412][ T7583] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 211.483611][ T7583] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 211.498191][ T7570] Invalid ELF header magic: != ELF [ 211.516302][ T7583] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.575849][ T7583] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.787580][ T7592] CIFS mount error: No usable UNC path provided in device string! [ 211.787580][ T7592] [ 211.842221][ T7592] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 211.916800][ T7592] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[7592] [ 212.745749][ T7606] netlink: 28 bytes leftover after parsing attributes in process `syz.2.393'. [ 213.092773][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 213.459968][ T7637] netlink: 130 bytes leftover after parsing attributes in process `syz.0.400'. [ 213.498357][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 213.498367][ T56] Bluetooth: hci1: command 0x0c1a tx timeout [ 213.578203][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.656708][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.794983][ T7648] CIFS mount error: No usable UNC path provided in device string! [ 213.794983][ T7648] [ 213.805266][ T7648] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 213.898796][ T7647] Invalid ELF header magic: != ELF [ 213.945848][ T7645] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[7645] [ 217.705520][ T5849] Bluetooth: hci0: unexpected event 0x32 length: 10 > 9 [ 217.716156][ T5849] Bluetooth: hci0: unexpected event 0x32 length: 10 > 9 [ 218.246551][ T7734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.424'. [ 218.432252][ T7734] Invalid ELF header magic: != ELF [ 219.399504][ T7734] could not allocate digest TFM handle [ 219.425005][ T7742] could not allocate digest TFM handle [ 219.839509][ T7772] FAULT_INJECTION: forcing a failure. [ 219.839509][ T7772] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 219.915702][ T7772] CPU: 1 UID: 0 PID: 7772 Comm: syz.3.431 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 219.915744][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 219.915761][ T7772] Call Trace: [ 219.915770][ T7772] [ 219.915781][ T7772] dump_stack_lvl+0x16c/0x1f0 [ 219.915821][ T7772] should_fail_ex+0x512/0x640 [ 219.915869][ T7772] should_fail_alloc_page+0xe7/0x130 [ 219.915909][ T7772] prepare_alloc_pages+0x3c2/0x610 [ 219.915954][ T7772] ? rcu_is_watching+0x12/0xc0 [ 219.915984][ T7772] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 219.916025][ T7772] ? do_raw_spin_lock+0x12c/0x2b0 [ 219.916069][ T7772] ? find_held_lock+0x2b/0x80 [ 219.916100][ T7772] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 219.916134][ T7772] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 219.916173][ T7772] ? stack_depot_save_flags+0x3e6/0xa50 [ 219.916222][ T7772] ? kasan_save_stack+0x42/0x60 [ 219.916257][ T7772] ? __lock_acquire+0xaa4/0x1ba0 [ 219.916290][ T7772] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 219.916332][ T7772] ? policy_nodemask+0xea/0x4e0 [ 219.916369][ T7772] alloc_pages_mpol+0x1fb/0x550 [ 219.916403][ T7772] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 219.916433][ T7772] ? __page_table_check_ptes_set+0x1ae/0x420 [ 219.916471][ T7772] ? find_held_lock+0x2b/0x80 [ 219.916503][ T7772] alloc_pages_noprof+0x131/0x390 [ 219.916539][ T7772] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 219.916566][ T7772] get_free_pages_noprof+0xc/0x40 [ 219.916603][ T7772] kasan_populate_vmalloc_pte+0x2d/0x160 [ 219.916633][ T7772] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 219.916662][ T7772] __apply_to_page_range+0x617/0xd60 [ 219.916717][ T7772] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 219.916752][ T7772] ? __pfx___apply_to_page_range+0x10/0x10 [ 219.916799][ T7772] ? alloc_vmap_area+0x872/0x2970 [ 219.916848][ T7772] alloc_vmap_area+0x919/0x2970 [ 219.916905][ T7772] ? __pfx_alloc_vmap_area+0x10/0x10 [ 219.916956][ T7772] __get_vm_area_node+0x1a7/0x300 [ 219.917005][ T7772] __vmalloc_node_range_noprof+0x277/0x1540 [ 219.917052][ T7772] ? __do_sys_listmount+0x1c2/0xed0 [ 219.917107][ T7772] ? __do_sys_listmount+0x1c2/0xed0 [ 219.917155][ T7772] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 219.917212][ T7772] __kvmalloc_node_noprof+0x2ff/0x600 [ 219.917243][ T7772] ? __do_sys_listmount+0x1c2/0xed0 [ 219.917285][ T7772] ? __do_sys_listmount+0x1c2/0xed0 [ 219.917330][ T7772] ? __do_sys_listmount+0x1c2/0xed0 [ 219.917368][ T7772] __do_sys_listmount+0x1c2/0xed0 [ 219.917417][ T7772] ? __x64_sys_futex+0x1e0/0x4c0 [ 219.917445][ T7772] ? __x64_sys_futex+0x1e9/0x4c0 [ 219.917478][ T7772] ? __pfx___do_sys_listmount+0x10/0x10 [ 219.917517][ T7772] ? xfd_validate_state+0x5d/0x180 [ 219.917579][ T7772] do_syscall_64+0xcd/0x230 [ 219.917617][ T7772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.917644][ T7772] RIP: 0033:0x7f529398e969 [ 219.917664][ T7772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.917689][ T7772] RSP: 002b:00007f52917f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 219.917725][ T7772] RAX: ffffffffffffffda RBX: 00007f5293bb6160 RCX: 00007f529398e969 [ 219.917743][ T7772] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 219.917760][ T7772] RBP: 00007f5293a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 219.917778][ T7772] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 219.917793][ T7772] R13: 0000000000000000 R14: 00007f5293bb6160 R15: 00007ffcee6cda08 [ 219.917829][ T7772] [ 220.264503][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.475439][ T7770] could not allocate digest TFM handle [ 220.670587][ T7772] syz.3.431: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 220.780671][ T7772] CPU: 1 UID: 0 PID: 7772 Comm: syz.3.431 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 220.780715][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 220.780734][ T7772] Call Trace: [ 220.780743][ T7772] [ 220.780755][ T7772] dump_stack_lvl+0x16c/0x1f0 [ 220.780799][ T7772] warn_alloc+0x248/0x3a0 [ 220.780835][ T7772] ? __pfx_warn_alloc+0x10/0x10 [ 220.780871][ T7772] ? kfree+0x2b6/0x4d0 [ 220.780927][ T7772] ? __get_vm_area_node+0x1e5/0x300 [ 220.780981][ T7772] __vmalloc_node_range_noprof+0xd31/0x1540 [ 220.781044][ T7772] ? __do_sys_listmount+0x1c2/0xed0 [ 220.781097][ T7772] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 220.781163][ T7772] __kvmalloc_node_noprof+0x2ff/0x600 [ 220.781194][ T7772] ? __do_sys_listmount+0x1c2/0xed0 [ 220.781258][ T7772] ? __do_sys_listmount+0x1c2/0xed0 [ 220.781307][ T7772] ? __do_sys_listmount+0x1c2/0xed0 [ 220.781346][ T7772] __do_sys_listmount+0x1c2/0xed0 [ 220.781406][ T7772] ? __x64_sys_futex+0x1e0/0x4c0 [ 220.781437][ T7772] ? __x64_sys_futex+0x1e9/0x4c0 [ 220.781469][ T7772] ? __pfx___do_sys_listmount+0x10/0x10 [ 220.781524][ T7772] ? xfd_validate_state+0x5d/0x180 [ 220.781584][ T7772] do_syscall_64+0xcd/0x230 [ 220.781624][ T7772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.781652][ T7772] RIP: 0033:0x7f529398e969 [ 220.781675][ T7772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.781707][ T7772] RSP: 002b:00007f52917f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 220.781734][ T7772] RAX: ffffffffffffffda RBX: 00007f5293bb6160 RCX: 00007f529398e969 [ 220.781752][ T7772] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000100 [ 220.781769][ T7772] RBP: 00007f5293a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 220.781786][ T7772] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 220.781803][ T7772] R13: 0000000000000000 R14: 00007f5293bb6160 R15: 00007ffcee6cda08 [ 220.781839][ T7772] [ 220.781913][ T7772] Mem-Info: [ 220.964482][ T7782] FAULT_INJECTION: forcing a failure. [ 220.964482][ T7782] name failslab, interval 1, probability 0, space 0, times 0 [ 220.987121][ T7772] active_anon:12956 inactive_anon:2 isolated_anon:0 [ 220.987121][ T7772] active_file:17805 inactive_file:39045 isolated_file:0 [ 220.987121][ T7772] unevictable:768 dirty:620 writeback:0 [ 220.987121][ T7772] slab_reclaimable:10403 slab_unreclaimable:95869 [ 220.987121][ T7772] mapped:26319 shmem:1408 pagetables:833 [ 220.987121][ T7772] sec_pagetables:0 bounce:0 [ 220.987121][ T7772] kernel_misc_reclaimable:0 [ 220.987121][ T7772] free:1202702 free_pcp:2872 free_cma:0 [ 221.048244][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.062162][ T7782] CPU: 1 UID: 0 PID: 7782 Comm: syz.2.433 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 221.062200][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 221.062218][ T7782] Call Trace: [ 221.062227][ T7782] [ 221.062238][ T7782] dump_stack_lvl+0x16c/0x1f0 [ 221.062278][ T7782] should_fail_ex+0x512/0x640 [ 221.062319][ T7782] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 221.062368][ T7782] should_failslab+0xc2/0x120 [ 221.062403][ T7782] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 221.062438][ T7782] ? __d_alloc+0x31/0xaa0 [ 221.062474][ T7782] __d_alloc+0x31/0xaa0 [ 221.062508][ T7782] d_alloc_pseudo+0x1c/0xc0 [ 221.062546][ T7782] alloc_file_pseudo+0xcf/0x230 [ 221.062586][ T7782] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 221.062625][ T7782] ? alloc_fd+0x471/0x7d0 [ 221.062675][ T7782] sock_alloc_file+0x50/0x210 [ 221.062707][ T7782] __sys_socket+0x1c0/0x260 [ 221.062746][ T7782] ? __pfx___sys_socket+0x10/0x10 [ 221.062785][ T7782] ? rcu_is_watching+0x12/0xc0 [ 221.062821][ T7782] __x64_sys_socket+0x72/0xb0 [ 221.062859][ T7782] ? lockdep_hardirqs_on+0x7c/0x110 [ 221.062893][ T7782] do_syscall_64+0xcd/0x230 [ 221.062933][ T7782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.062964][ T7782] RIP: 0033:0x7f954498e969 [ 221.062988][ T7782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.063016][ T7782] RSP: 002b:00007f95427f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 221.063044][ T7782] RAX: ffffffffffffffda RBX: 00007f9544bb5fa0 RCX: 00007f954498e969 [ 221.063064][ T7782] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 221.063081][ T7782] RBP: 00007f9544a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 221.063099][ T7782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.063117][ T7782] R13: 0000000000000000 R14: 00007f9544bb5fa0 R15: 00007fff545b3438 [ 221.063154][ T7782] [ 221.260847][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.328748][ T7765] FAULT_INJECTION: forcing a failure. [ 221.328748][ T7765] name failslab, interval 1, probability 0, space 0, times 0 [ 221.342032][ T7765] CPU: 1 UID: 0 PID: 7765 Comm: syz.3.431 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 221.342075][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 221.342093][ T7765] Call Trace: [ 221.342104][ T7765] [ 221.342115][ T7765] dump_stack_lvl+0x16c/0x1f0 [ 221.342159][ T7765] should_fail_ex+0x512/0x640 [ 221.342200][ T7765] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 221.342240][ T7765] should_failslab+0xc2/0x120 [ 221.342278][ T7765] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 221.342314][ T7765] ? sk_prot_alloc+0x60/0x2a0 [ 221.342368][ T7765] sk_prot_alloc+0x60/0x2a0 [ 221.342408][ T7765] sk_alloc+0x36/0xc20 [ 221.342457][ T7765] inet6_create+0x381/0x1300 [ 221.342507][ T7765] ? inet6_create+0x7f/0x1300 [ 221.342560][ T7765] __sock_create+0x335/0x8d0 [ 221.342609][ T7765] inet_ctl_sock_create+0x94/0x230 [ 221.342646][ T7765] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 221.342681][ T7765] ? lockdep_init_map_type+0x5c/0x280 [ 221.342724][ T7765] ? do_init_timer+0xc9/0x110 [ 221.342760][ T7765] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 221.342798][ T7765] sctp_ctrlsock_init+0x40/0xf0 [ 221.342834][ T7765] ops_init+0x1df/0x5f0 [ 221.342871][ T7765] setup_net+0x21e/0x850 [ 221.342907][ T7765] ? __pfx_setup_net+0x10/0x10 [ 221.342936][ T7765] ? lockdep_init_map_type+0x5c/0x280 [ 221.342978][ T7765] ? __pfx_down_read_killable+0x10/0x10 [ 221.343028][ T7765] ? debug_mutex_init+0x37/0x70 [ 221.343083][ T7765] copy_net_ns+0x2a6/0x5f0 [ 221.343124][ T7765] create_new_namespaces+0x3ea/0xad0 [ 221.343170][ T7765] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 221.343209][ T7765] ksys_unshare+0x45b/0xa40 [ 221.343253][ T7765] ? __pfx_ksys_unshare+0x10/0x10 [ 221.343293][ T7765] ? xfd_validate_state+0x5d/0x180 [ 221.343357][ T7765] ? rcu_is_watching+0x12/0xc0 [ 221.343397][ T7765] __x64_sys_unshare+0x31/0x40 [ 221.343440][ T7765] do_syscall_64+0xcd/0x230 [ 221.343483][ T7765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.343515][ T7765] RIP: 0033:0x7f529398e969 [ 221.343541][ T7765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.343572][ T7765] RSP: 002b:00007f5294741038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 221.343602][ T7765] RAX: ffffffffffffffda RBX: 00007f5293bb5fa0 RCX: 00007f529398e969 [ 221.343623][ T7765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 221.343642][ T7765] RBP: 00007f5293a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 221.343661][ T7765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.343680][ T7765] R13: 0000000000000000 R14: 00007f5293bb5fa0 R15: 00007ffcee6cda08 [ 221.343721][ T7765] [ 221.610285][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.630034][ T7772] Node 0 active_anon:52724kB inactive_anon:8kB active_file:71320kB inactive_file:156104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106276kB dirty:2780kB writeback:0kB shmem:5196kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10628kB pagetables:3332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 221.663517][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.669742][ T7772] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 221.700882][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.707587][ T7772] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 221.734919][ T7772] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 221.734989][ T7772] Node 0 DMA32 free:892404kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:53176kB inactive_anon:8kB active_file:71320kB inactive_file:154264kB unevictable:1536kB writepending:2780kB present:3129332kB managed:2544212kB mlocked:0kB bounce:0kB free_pcp:1336kB local_pcp:380kB free_cma:0kB [ 221.735073][ T7772] lowmem_reserve[]: 0 0 1 1 1 [ 221.735132][ T7772] Node 0 Normal free:12kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 221.735216][ T7772] lowmem_reserve[]: 0 0 0 0 0 [ 221.735274][ T7772] Node 1 Normal free:3909716kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:2172kB local_pcp:0kB free_cma:0kB [ 221.735390][ T7772] lowmem_reserve[]: 0 0 0 0 0 [ 221.735448][ T7772] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 221.735652][ T7772] Node 0 DMA32: 1174*4kB (UME) 1255*8kB (UME) 985*16kB (UME) 933*32kB (UME) 630*64kB (UME) 294*128kB (UME) 187*256kB (UM) 73*512kB (UM) 25*1024kB (UM) 8*2048kB (UME) 153*4096kB (UM) = 892224kB [ 221.735912][ T7772] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 221.736090][ T7772] Node 1 Normal: 219*4kB (UME) 55*8kB (UME) 55*16kB (UME) 230*32kB (UME) 110*64kB (UME) 29*128kB (UME) 19*256kB (UME) 9*512kB (UME) 5*1024kB (UME) 4*2048kB (U) 944*4096kB (M) = 3909716kB [ 221.736366][ T7772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 221.736393][ T7772] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 221.736418][ T7772] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 221.736444][ T7772] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 221.736521][ T7772] 58620 total pagecache pages [ 221.736533][ T7772] 37 pages in swap cache [ 221.736543][ T7772] Free swap = 124884kB [ 221.736555][ T7772] Total swap = 124996kB [ 221.736567][ T7772] 2097051 pages RAM [ 221.736577][ T7772] 0 pages HighMem/MovableOnly [ 221.736586][ T7772] 428892 pages reserved [ 221.736596][ T7772] 0 pages cma reserved [ 221.932503][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.938307][ T7788] sctp: failed to load transform for md5: -2 [ 224.521277][ T7856] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x7fe4b551e pfn:0x78c00 [ 224.546662][ T7856] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 224.585079][ T7856] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 224.643763][ T7856] raw: 00000007fe4b551e 0000000000000000 0000000400000002 0000000000000000 [ 224.666833][ T7856] page dumped because: unmovable page [ 224.672293][ T7856] page_owner tracks the page as allocated [ 224.686713][ T7856] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5832, tgid 5832 (syz-executor), ts 93377696491, free_ts 93143609201 [ 224.822763][ T7856] post_alloc_hook+0x181/0x1b0 [ 224.844379][ T7856] get_page_from_freelist+0x135c/0x3920 [ 224.874552][ T7856] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 224.892145][ T7856] alloc_pages_mpol+0x1fb/0x550 [ 224.901834][ T7856] alloc_pages_noprof+0x131/0x390 [ 224.907089][ T7856] __vmalloc_node_range_noprof+0x732/0x1540 [ 224.913215][ T7856] vmalloc_user_noprof+0x6b/0x90 [ 224.922053][ T7856] kcov_ioctl+0x4c/0x730 [ 224.926579][ T7856] __x64_sys_ioctl+0x190/0x200 [ 224.931460][ T7856] do_syscall_64+0xcd/0x230 [ 224.936147][ T7856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.945636][ T7856] page last free pid 5824 tgid 5824 stack trace: [ 224.952177][ T7856] free_unref_folios+0x999/0x1630 [ 224.960682][ T7856] folios_put_refs+0x56f/0x740 [ 224.965623][ T7856] free_pages_and_swap_cache+0x245/0x4a0 [ 224.972641][ T7856] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 224.987322][ T7856] tlb_finish_mmu+0x168/0x7b0 [ 224.992149][ T7856] vms_clear_ptes+0x55e/0x770 [ 224.999681][ T7856] vms_complete_munmap_vmas+0x1ca/0x970 [ 225.005373][ T7856] do_vmi_align_munmap+0x43b/0x7d0 [ 225.011652][ T7856] do_vmi_munmap+0x208/0x3e0 [ 225.016390][ T7856] __vm_munmap+0x19a/0x390 [ 225.056702][ T7856] __x64_sys_munmap+0x59/0x80 [ 225.078572][ T7856] do_syscall_64+0xcd/0x230 [ 225.094588][ T7856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.701048][ T7871] FAULT_INJECTION: forcing a failure. [ 225.701048][ T7871] name failslab, interval 1, probability 0, space 0, times 0 [ 225.713868][ T7871] CPU: 1 UID: 0 PID: 7871 Comm: syz.2.451 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 225.713910][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 225.713929][ T7871] Call Trace: [ 225.713940][ T7871] [ 225.713952][ T7871] dump_stack_lvl+0x16c/0x1f0 [ 225.714021][ T7871] should_fail_ex+0x512/0x640 [ 225.714066][ T7871] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 225.714105][ T7871] should_failslab+0xc2/0x120 [ 225.714143][ T7871] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 225.714175][ T7871] ? trace_kmalloc+0x2b/0xd0 [ 225.714214][ T7871] ? __kmalloc_noprof+0x242/0x510 [ 225.714245][ T7871] ? getname_flags.part.0+0x4c/0x550 [ 225.714292][ T7871] getname_flags.part.0+0x4c/0x550 [ 225.714337][ T7871] getname_flags+0x93/0xf0 [ 225.714384][ T7871] do_sys_openat2+0xb8/0x1d0 [ 225.714424][ T7871] ? __pfx_do_sys_openat2+0x10/0x10 [ 225.714481][ T7871] __x64_sys_openat+0x174/0x210 [ 225.714524][ T7871] ? __pfx___x64_sys_openat+0x10/0x10 [ 225.714568][ T7871] ? rcu_is_watching+0x12/0xc0 [ 225.714608][ T7871] do_syscall_64+0xcd/0x230 [ 225.714649][ T7871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.714681][ T7871] RIP: 0033:0x7f954498e969 [ 225.714706][ T7871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.714738][ T7871] RSP: 002b:00007f95427f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 225.714767][ T7871] RAX: ffffffffffffffda RBX: 00007f9544bb5fa0 RCX: 00007f954498e969 [ 225.714787][ T7871] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 225.714807][ T7871] RBP: 00007f9544a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 225.714826][ T7871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.714844][ T7871] R13: 0000000000000000 R14: 00007f9544bb5fa0 R15: 00007fff545b3438 [ 225.714884][ T7871] [ 225.902664][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.242496][ T7892] openvswitch: netlink: Multiple metadata blocks provided [ 231.480535][ T7955] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.491108][ T7955] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.670884][ T7955] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.698135][ T7955] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.894789][ T7970] block2mtd: parameter too long [ 232.937948][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 233.500843][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 233.737486][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.743627][ T56] Bluetooth: hci2: command 0x0c1a tx timeout [ 234.767792][ T8013] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 234.825453][ T8013] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 235.743687][ T8042] CIFS mount error: No usable UNC path provided in device string! [ 235.743687][ T8042] [ 235.887523][ T8042] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 236.325211][ T8047] could not allocate digest TFM handle [ 237.514479][ T8076] FAULT_INJECTION: forcing a failure. [ 237.514479][ T8076] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 237.549178][ T8076] CPU: 0 UID: 0 PID: 8076 Comm: syz.1.492 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 237.549223][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 237.549242][ T8076] Call Trace: [ 237.549253][ T8076] [ 237.549265][ T8076] dump_stack_lvl+0x16c/0x1f0 [ 237.549311][ T8076] should_fail_ex+0x512/0x640 [ 237.549363][ T8076] should_fail_alloc_page+0xe7/0x130 [ 237.549406][ T8076] prepare_alloc_pages+0x3c2/0x610 [ 237.549461][ T8076] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 237.549504][ T8076] ? __lock_acquire+0x5ca/0x1ba0 [ 237.549557][ T8076] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 237.549601][ T8076] ? find_held_lock+0x2b/0x80 [ 237.549634][ T8076] ? bpf_ksym_find+0x124/0x1c0 [ 237.549684][ T8076] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 237.549718][ T8076] ? is_bpf_text_address+0x94/0x1a0 [ 237.549755][ T8076] ? kernel_text_address+0x8d/0x100 [ 237.549804][ T8076] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.549847][ T8076] ? policy_nodemask+0xea/0x4e0 [ 237.549905][ T8076] alloc_pages_mpol+0x1fb/0x550 [ 237.549946][ T8076] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 237.550005][ T8076] alloc_pages_noprof+0x131/0x390 [ 237.550047][ T8076] __pud_alloc+0x39/0x690 [ 237.550096][ T8076] copy_page_range+0x3a6d/0x5fe0 [ 237.550186][ T8076] ? mas_destroy+0x5de/0xa20 [ 237.550233][ T8076] ? __pfx_copy_page_range+0x10/0x10 [ 237.550286][ T8076] ? mas_store+0x93a/0x10c0 [ 237.550330][ T8076] ? __pfx___might_resched+0x10/0x10 [ 237.550371][ T8076] ? __pfx_mas_store+0x10/0x10 [ 237.550411][ T8076] ? __vma_enter_locked+0x163/0x3f0 [ 237.550447][ T8076] ? down_write+0x14d/0x200 [ 237.550514][ T8076] copy_process+0x862b/0x91a0 [ 237.550588][ T8076] ? __pfx_copy_process+0x10/0x10 [ 237.550632][ T8076] ? try_to_wake_up+0xa2f/0x1680 [ 237.550669][ T8076] ? plist_check_head+0xa3/0x150 [ 237.550730][ T8076] ? find_held_lock+0x2b/0x80 [ 237.550765][ T8076] ? wake_up_q+0xb0/0x160 [ 237.550789][ T8076] ? do_raw_spin_unlock+0x172/0x230 [ 237.550843][ T8076] kernel_clone+0xfc/0x960 [ 237.550882][ T8076] ? __pfx_futex_wake+0x10/0x10 [ 237.550921][ T8076] ? __pfx_kernel_clone+0x10/0x10 [ 237.550993][ T8076] __do_sys_clone+0xce/0x120 [ 237.551033][ T8076] ? __pfx___do_sys_clone+0x10/0x10 [ 237.551097][ T8076] ? rcu_is_watching+0x12/0xc0 [ 237.551139][ T8076] do_syscall_64+0xcd/0x230 [ 237.551182][ T8076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.551214][ T8076] RIP: 0033:0x7fdea058e969 [ 237.551239][ T8076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.551269][ T8076] RSP: 002b:00007fdea13e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 237.551300][ T8076] RAX: ffffffffffffffda RBX: 00007fdea07b5fa0 RCX: 00007fdea058e969 [ 237.551321][ T8076] RDX: 0000200000000040 RSI: 0000000000007fff RDI: 0000000000000006 [ 237.551341][ T8076] RBP: 00007fdea0610ab1 R08: 0000000000000080 R09: 0000000000000000 [ 237.551360][ T8076] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 237.551379][ T8076] R13: 0000000000000000 R14: 00007fdea07b5fa0 R15: 00007ffcf51c93a8 [ 237.551422][ T8076] [ 238.317509][ T8071] block2mtd: parameter too long [ 239.006724][ T8087] could not allocate digest TFM handle [ 239.057833][ T8087] netlink: 338 bytes leftover after parsing attributes in process `syz.3.495'. [ 239.104748][ T8087] veth1_macvtap: left promiscuous mode [ 239.123337][ T8087] macsec0: entered allmulticast mode [ 239.343905][ T8096] could not allocate digest TFM handle [ 239.538475][ T8096] netlink: 338 bytes leftover after parsing attributes in process `syz.2.494'. [ 239.948113][ T5849] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 239.958534][ T30] audit: type=1800 audit(6040824993.573:3): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.500" name="dbroot" dev="configfs" ino=16216 res=0 errno=0 [ 241.249756][ T8129] Invalid ELF header magic: != ELF [ 242.950042][ T8152] could not allocate digest TFM handle [ 243.243831][ T8164] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 243.265028][ T8162] HfR: entered promiscuous mode [ 243.273405][ T8152] netlink: 338 bytes leftover after parsing attributes in process `syz.2.508'. [ 244.846550][ T30] audit: type=1804 audit(6040825007.455:4): pid=8184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.513" name="/newroot/sys/kernel/tracing/dynamic_events" dev="tracefs" ino=16 res=1 errno=0 [ 244.926008][ T8188] could not allocate digest TFM handle [ 244.972126][ T8188] netlink: 338 bytes leftover after parsing attributes in process `syz.0.517'. [ 245.021479][ T8188] veth1_macvtap: left promiscuous mode [ 245.036615][ T8188] macsec0: entered allmulticast mode [ 245.604288][ T8206] FAULT_INJECTION: forcing a failure. [ 245.604288][ T8206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.636576][ T8206] CPU: 1 UID: 0 PID: 8206 Comm: syz.0.522 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 245.636619][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 245.636637][ T8206] Call Trace: [ 245.636647][ T8206] [ 245.636662][ T8206] dump_stack_lvl+0x16c/0x1f0 [ 245.636718][ T8206] should_fail_ex+0x512/0x640 [ 245.636766][ T8206] core_sys_select+0x4b2/0xbe0 [ 245.636821][ T8206] ? __pfx_core_sys_select+0x10/0x10 [ 245.636904][ T8206] ? read_tsc+0x9/0x20 [ 245.636939][ T8206] ? ktime_get_ts64+0x256/0x400 [ 245.636981][ T8206] kern_select+0x15d/0x1e0 [ 245.637023][ T8206] ? __pfx_kern_select+0x10/0x10 [ 245.637066][ T8206] ? xfd_validate_state+0x5d/0x180 [ 245.637115][ T8206] ? rcu_is_watching+0x12/0xc0 [ 245.637146][ T8206] __x64_sys_select+0xbd/0x160 [ 245.637209][ T8206] ? do_syscall_64+0x91/0x230 [ 245.637246][ T8206] ? lockdep_hardirqs_on+0x7c/0x110 [ 245.637280][ T8206] do_syscall_64+0xcd/0x230 [ 245.637322][ T8206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.637353][ T8206] RIP: 0033:0x7f5f2198e969 [ 245.637377][ T8206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.637407][ T8206] RSP: 002b:00007f5f227ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 245.637437][ T8206] RAX: ffffffffffffffda RBX: 00007f5f21bb5fa0 RCX: 00007f5f2198e969 [ 245.637457][ T8206] RDX: 0000200000000500 RSI: 0000200000000480 RDI: 0000000000000009 [ 245.637476][ T8206] RBP: 00007f5f21a10ab1 R08: 0000200000000600 R09: 0000000000000000 [ 245.637495][ T8206] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 245.637521][ T8206] R13: 0000000000000000 R14: 00007f5f21bb5fa0 R15: 00007ffd13c1e368 [ 245.637560][ T8206] [ 248.247938][ T8243] could not allocate digest TFM handle [ 248.393594][ T8243] netlink: 338 bytes leftover after parsing attributes in process `syz.1.527'. [ 249.080646][ T8243] veth1_macvtap: left promiscuous mode [ 249.086197][ T8243] macsec0: entered allmulticast mode [ 251.453420][ T8268] could not allocate digest TFM handle [ 251.484863][ T8274] netlink: 338 bytes leftover after parsing attributes in process `syz.1.531'. [ 251.932774][ T8281] CIFS mount error: No usable UNC path provided in device string! [ 251.932774][ T8281] [ 252.023439][ T8277] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[8277] [ 252.063391][ T8283] CIFS mount error: No usable UNC path provided in device string! [ 252.063391][ T8283] [ 252.074402][ T8281] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 252.083811][ T8283] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 252.141421][ T8283] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[8283] [ 252.156583][ T8287] synth uevent: /devices/virtual/tty/ttyr8: unknown uevent action string [ 252.272976][ T8287] tty ttyr8: uevent: failed to send synthetic uevent: -22 [ 252.980771][ T8303] FAULT_INJECTION: forcing a failure. [ 252.980771][ T8303] name failslab, interval 1, probability 0, space 0, times 0 [ 253.006597][ T8303] CPU: 1 UID: 0 PID: 8303 Comm: syz.3.544 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 253.006638][ T8303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 253.006655][ T8303] Call Trace: [ 253.006664][ T8303] [ 253.006674][ T8303] dump_stack_lvl+0x16c/0x1f0 [ 253.006713][ T8303] should_fail_ex+0x512/0x640 [ 253.006750][ T8303] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 253.006798][ T8303] should_failslab+0xc2/0x120 [ 253.006832][ T8303] __kmalloc_cache_noprof+0x6a/0x3e0 [ 253.006878][ T8303] ? getname_flags.part.0+0x292/0x550 [ 253.006929][ T8303] getname_flags.part.0+0x292/0x550 [ 253.006970][ T8303] getname_flags+0x93/0xf0 [ 253.007012][ T8303] do_sys_openat2+0xb8/0x1d0 [ 253.007048][ T8303] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.007097][ T8303] __x64_sys_open+0x153/0x1e0 [ 253.007132][ T8303] ? __pfx___x64_sys_open+0x10/0x10 [ 253.007176][ T8303] ? rcu_is_watching+0x12/0xc0 [ 253.007204][ T8303] do_syscall_64+0xcd/0x230 [ 253.007240][ T8303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.007267][ T8303] RIP: 0033:0x7f529398e969 [ 253.007289][ T8303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.007315][ T8303] RSP: 002b:00007f5294741038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 253.007341][ T8303] RAX: ffffffffffffffda RBX: 00007f5293bb5fa0 RCX: 00007f529398e969 [ 253.007359][ T8303] RDX: 00000000000000d1 RSI: 0000000000103040 RDI: 0000200000000380 [ 253.007375][ T8303] RBP: 00007f5293a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 253.007391][ T8303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.007407][ T8303] R13: 0000000000000000 R14: 00007f5293bb5fa0 R15: 00007ffcee6cda08 [ 253.007442][ T8303] [ 253.034192][ T8300] FAULT_INJECTION: forcing a failure. [ 253.034192][ T8300] name failslab, interval 1, probability 0, space 0, times 0 [ 253.316645][ T8300] CPU: 1 UID: 0 PID: 8300 Comm: syz.0.543 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 253.316684][ T8300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 253.316700][ T8300] Call Trace: [ 253.316710][ T8300] [ 253.316721][ T8300] dump_stack_lvl+0x16c/0x1f0 [ 253.316763][ T8300] should_fail_ex+0x512/0x640 [ 253.316804][ T8300] ? __kmalloc_noprof+0xbf/0x510 [ 253.316838][ T8300] ? ops_init+0x77/0x5f0 [ 253.316865][ T8300] should_failslab+0xc2/0x120 [ 253.316911][ T8300] __kmalloc_noprof+0xd2/0x510 [ 253.316942][ T8300] ? debug_mutex_init+0x37/0x70 [ 253.316994][ T8300] ops_init+0x77/0x5f0 [ 253.317027][ T8300] setup_net+0x21e/0x850 [ 253.317061][ T8300] ? __pfx_setup_net+0x10/0x10 [ 253.317087][ T8300] ? lockdep_init_map_type+0x5c/0x280 [ 253.317125][ T8300] ? __pfx_down_read_killable+0x10/0x10 [ 253.317171][ T8300] ? debug_mutex_init+0x37/0x70 [ 253.317223][ T8300] copy_net_ns+0x2a6/0x5f0 [ 253.317261][ T8300] create_new_namespaces+0x3ea/0xad0 [ 253.317302][ T8300] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 253.317338][ T8300] ksys_unshare+0x45b/0xa40 [ 253.317378][ T8300] ? __pfx_ksys_unshare+0x10/0x10 [ 253.317414][ T8300] ? xfd_validate_state+0x5d/0x180 [ 253.317461][ T8300] ? rcu_is_watching+0x12/0xc0 [ 253.317495][ T8300] __x64_sys_unshare+0x31/0x40 [ 253.317531][ T8300] do_syscall_64+0xcd/0x230 [ 253.317582][ T8300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.317606][ T8300] RIP: 0033:0x7f5f2198e969 [ 253.317721][ T8300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.317774][ T8300] RSP: 002b:00007f5f227ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 253.317801][ T8300] RAX: ffffffffffffffda RBX: 00007f5f21bb5fa0 RCX: 00007f5f2198e969 [ 253.317820][ T8300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 253.317837][ T8300] RBP: 00007f5f21a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 253.317853][ T8300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.317883][ T8300] R13: 0000000000000000 R14: 00007f5f21bb5fa0 R15: 00007ffd13c1e368 [ 253.317939][ T8300] [ 254.503050][ T8320] FAULT_INJECTION: forcing a failure. [ 254.503050][ T8320] name fail_futex, interval 1, probability 0, space 0, times 0 [ 254.548785][ T8320] CPU: 1 UID: 0 PID: 8320 Comm: syz.0.546 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 254.548826][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 254.548845][ T8320] Call Trace: [ 254.548854][ T8320] [ 254.548864][ T8320] dump_stack_lvl+0x16c/0x1f0 [ 254.548906][ T8320] should_fail_ex+0x512/0x640 [ 254.548951][ T8320] get_futex_key+0x49e/0x1000 [ 254.548985][ T8320] ? __pfx_get_futex_key+0x10/0x10 [ 254.549011][ T8320] ? stack_trace_save+0x8e/0xc0 [ 254.549038][ T8320] ? __pfx_stack_trace_save+0x10/0x10 [ 254.549066][ T8320] ? stack_depot_save_flags+0x28/0xa50 [ 254.549108][ T8320] ? __lock_acquire+0xaa4/0x1ba0 [ 254.549150][ T8320] futex_wait_setup+0x78/0x290 [ 254.549187][ T8320] ? kasan_save_free_info+0x3b/0x60 [ 254.549232][ T8320] ? __x64_sys_openat+0x174/0x210 [ 254.549273][ T8320] __futex_wait+0x266/0x3c0 [ 254.549312][ T8320] ? __pfx___futex_wait+0x10/0x10 [ 254.549357][ T8320] ? __pfx_futex_wake_mark+0x10/0x10 [ 254.549411][ T8320] futex_wait+0xe8/0x380 [ 254.549448][ T8320] ? __pfx_futex_wait+0x10/0x10 [ 254.549492][ T8320] ? kmem_cache_free+0x2d4/0x4d0 [ 254.549519][ T8320] ? fd_install+0x225/0x750 [ 254.549567][ T8320] ? putname+0x154/0x1a0 [ 254.549605][ T8320] do_futex+0x229/0x350 [ 254.549636][ T8320] ? __pfx_do_futex+0x10/0x10 [ 254.549676][ T8320] __x64_sys_futex+0x1e0/0x4c0 [ 254.549709][ T8320] ? __x64_sys_openat+0x174/0x210 [ 254.549748][ T8320] ? __pfx___x64_sys_futex+0x10/0x10 [ 254.549781][ T8320] ? rcu_is_watching+0x12/0xc0 [ 254.549817][ T8320] do_syscall_64+0xcd/0x230 [ 254.549856][ T8320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.549885][ T8320] RIP: 0033:0x7f5f2198e969 [ 254.549908][ T8320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.549954][ T8320] RSP: 002b:00007f5f227cc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 254.549982][ T8320] RAX: ffffffffffffffda RBX: 00007f5f21bb6088 RCX: 00007f5f2198e969 [ 254.550001][ T8320] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5f21bb6088 [ 254.550019][ T8320] RBP: 00007f5f21bb6080 R08: 0000000000000000 R09: 0000000000000000 [ 254.550037][ T8320] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5f21bb608c [ 254.550056][ T8320] R13: 0000000000000000 R14: 00007ffd13c1e280 R15: 00007ffd13c1e368 [ 254.550095][ T8320] [ 255.993862][ T8324] FAULT_INJECTION: forcing a failure. [ 255.993862][ T8324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.030076][ T8324] CPU: 0 UID: 0 PID: 8324 Comm: syz.0.556 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 256.030114][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 256.030130][ T8324] Call Trace: [ 256.030138][ T8324] [ 256.030148][ T8324] dump_stack_lvl+0x16c/0x1f0 [ 256.030186][ T8324] should_fail_ex+0x512/0x640 [ 256.030226][ T8324] _copy_from_user+0x2e/0xd0 [ 256.030267][ T8324] kstrtoul_from_user+0xc0/0x1b0 [ 256.030297][ T8324] ? __pfx_kstrtoul_from_user+0x10/0x10 [ 256.030338][ T8324] ? get_pid_task+0xfc/0x250 [ 256.030388][ T8324] tracing_entries_write+0xcf/0x220 [ 256.030418][ T8324] ? __pfx_tracing_entries_write+0x10/0x10 [ 256.030459][ T8324] vfs_write+0x25c/0x1180 [ 256.030482][ T8324] ? __pfx_tracing_entries_write+0x10/0x10 [ 256.030517][ T8324] ? __pfx___mutex_lock+0x10/0x10 [ 256.030550][ T8324] ? __pfx_vfs_write+0x10/0x10 [ 256.030585][ T8324] ? __fget_files+0x20e/0x3c0 [ 256.030635][ T8324] ksys_write+0x12a/0x240 [ 256.030660][ T8324] ? __pfx_ksys_write+0x10/0x10 [ 256.030682][ T8324] ? rcu_is_watching+0x12/0xc0 [ 256.030716][ T8324] do_syscall_64+0xcd/0x230 [ 256.030750][ T8324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.030777][ T8324] RIP: 0033:0x7f5f2198e969 [ 256.030799][ T8324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.030825][ T8324] RSP: 002b:00007f5f227ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.030850][ T8324] RAX: ffffffffffffffda RBX: 00007f5f21bb5fa0 RCX: 00007f5f2198e969 [ 256.030867][ T8324] RDX: 0000000001000081 RSI: 0000200000000040 RDI: 0000000000000003 [ 256.030884][ T8324] RBP: 00007f5f227ed090 R08: 0000000000000000 R09: 0000000000000000 [ 256.030900][ T8324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.030916][ T8324] R13: 0000000000000000 R14: 00007f5f21bb5fa0 R15: 00007ffd13c1e368 [ 256.030952][ T8324] [ 256.459551][ T8331] HfR: entered promiscuous mode [ 256.482000][ T8331] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 256.921424][ T8346] CIFS mount error: No usable UNC path provided in device string! [ 256.921424][ T8346] [ 256.934168][ T8346] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 257.037322][ T8346] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[8346] [ 257.518983][ T8343] CIFS mount error: No usable UNC path provided in device string! [ 257.518983][ T8343] [ 257.535110][ T8343] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 258.135640][ T8370] vivid-003: ================= START STATUS ================= [ 258.147213][ T8370] vivid-003: Radio HW Seek Mode: Bounded [ 258.214757][ T8370] vivid-003: Radio Programmable HW Seek: false [ 258.293909][ T8370] vivid-003: RDS Rx I/O Mode: Block I/O [ 258.341343][ T8370] vivid-003: Generate RBDS Instead of RDS: false [ 258.372332][ T8370] vivid-003: RDS Reception: true [ 258.416702][ T8370] vivid-003: RDS Program Type: 0 inactive [ 258.422551][ T8370] vivid-003: RDS PS Name: inactive [ 258.445135][ T8370] vivid-003: RDS Radio Text: inactive [ 258.490788][ T8381] busy [ 258.569106][ T8370] vivid-003: RDS Traffic Announcement: false inactive [ 258.580928][ T8385] netlink: 338 bytes leftover after parsing attributes in process `syz.3.560'. [ 258.636654][ T8370] vivid-003: RDS Traffic Program: false inactive [ 258.656064][ T8370] vivid-003: RDS Music: false inactive [ 258.676306][ T8370] vivid-003: ================== END STATUS ================== [ 259.136388][ T8380] could not allocate digest TFM handle [ 259.301301][ T5849] Bluetooth: hci3: unexpected subevent 0x01 length: 122 > 18 [ 259.648231][ T8411] CIFS mount error: No usable UNC path provided in device string! [ 259.648231][ T8411] [ 259.658808][ T8411] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 259.763848][ T8410] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[8410] [ 259.881171][ T8419] CIFS mount error: No usable UNC path provided in device string! [ 259.881171][ T8419] [ 259.914807][ T8419] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 259.993880][ T8416] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[8416] [ 260.862685][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.869252][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.183798][ T8435] could not allocate digest TFM handle [ 261.242275][ T8435] netlink: 338 bytes leftover after parsing attributes in process `syz.2.573'. [ 261.392123][ T8450] busy [ 262.314883][ T8463] random: crng reseeded on system resumption [ 263.460060][ T8487] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 264.255252][ T8522] QAT: failed to copy from user cfg_data. [ 264.330203][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. •[ 268.166788][ T8576] could not allocate digest TFM handle [ 268.218783][ T8576] netlink: 338 bytes leftover after parsing attributes in process `syz.0.599'. [ 268.559606][ T8593] dyndbg: bad flag-op Ì, at start of Ì [ 268.585560][ T8593] dyndbg: flags parse failed [ 268.609668][ T8593] dyndbg: bad flag-op å, at start of å [ 268.630763][ T8593] dyndbg: flags parse failed [ 269.525421][ T8618] FAULT_INJECTION: forcing a failure. [ 269.525421][ T8618] name failslab, interval 1, probability 0, space 0, times 0 [ 269.556757][ T8618] CPU: 0 UID: 0 PID: 8618 Comm: syz.1.607 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 269.556794][ T8618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 269.556810][ T8618] Call Trace: [ 269.556819][ T8618] [ 269.556829][ T8618] dump_stack_lvl+0x16c/0x1f0 [ 269.556868][ T8618] should_fail_ex+0x512/0x640 [ 269.556904][ T8618] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 269.556938][ T8618] should_failslab+0xc2/0x120 [ 269.556970][ T8618] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 269.556997][ T8618] ? _raw_spin_unlock+0x28/0x50 [ 269.557024][ T8618] ? alloc_inode+0xc3/0x240 [ 269.557060][ T8618] alloc_inode+0xc3/0x240 [ 269.557107][ T8618] new_inode+0x22/0x1c0 [ 269.557136][ T8618] ? d_instantiate+0x77/0x90 [ 269.557168][ T8618] simple_fill_super+0x306/0x720 [ 269.557222][ T8618] ? __pfx_nfsd_fill_super+0x10/0x10 [ 269.557267][ T8618] nfsd_fill_super+0x90/0x530 [ 269.557308][ T8618] ? __pfx_set_anon_super_fc+0x10/0x10 [ 269.557348][ T8618] ? __pfx_nfsd_fill_super+0x10/0x10 [ 269.557389][ T8618] get_tree_keyed+0x10b/0x1d0 [ 269.557432][ T8618] vfs_get_tree+0x8b/0x340 [ 269.557468][ T8618] path_mount+0x14d4/0x1f20 [ 269.557497][ T8618] ? kmem_cache_free+0x2d4/0x4d0 [ 269.557522][ T8618] ? __pfx_path_mount+0x10/0x10 [ 269.557553][ T8618] ? putname+0x154/0x1a0 [ 269.557590][ T8618] __x64_sys_mount+0x28d/0x310 [ 269.557619][ T8618] ? __pfx___x64_sys_mount+0x10/0x10 [ 269.557645][ T8618] ? rcu_is_watching+0x12/0xc0 [ 269.557689][ T8618] do_syscall_64+0xcd/0x230 [ 269.557722][ T8618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.557747][ T8618] RIP: 0033:0x7fdea058e969 [ 269.557767][ T8618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.557792][ T8618] RSP: 002b:00007fdea13e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 269.557816][ T8618] RAX: ffffffffffffffda RBX: 00007fdea07b5fa0 RCX: 00007fdea058e969 [ 269.557833][ T8618] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 269.557847][ T8618] RBP: 00007fdea0610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 269.557862][ T8618] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 269.557876][ T8618] R13: 0000000000000000 R14: 00007fdea07b5fa0 R15: 00007ffcf51c93a8 [ 269.557907][ T8618] [ 269.946616][ T8609] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 270.186208][ T8635] Invalid ELF header magic: != ELF [ 270.272040][ T8630] FAULT_INJECTION: forcing a failure. [ 270.272040][ T8630] name failslab, interval 1, probability 0, space 0, times 0 [ 270.316543][ T8630] CPU: 1 UID: 0 PID: 8630 Comm: syz.1.608 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 270.316588][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 270.316609][ T8630] Call Trace: [ 270.316619][ T8630] [ 270.316631][ T8630] dump_stack_lvl+0x16c/0x1f0 [ 270.316673][ T8630] should_fail_ex+0x512/0x640 [ 270.316714][ T8630] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 270.316752][ T8630] should_failslab+0xc2/0x120 [ 270.316788][ T8630] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 270.316819][ T8630] ? vma_merge_new_range+0x3f8/0xc10 [ 270.316848][ T8630] ? vm_area_alloc+0x1f/0x160 [ 270.316886][ T8630] vm_area_alloc+0x1f/0x160 [ 270.316918][ T8630] __mmap_region+0xfd0/0x27c0 [ 270.316951][ T8630] ? rcu_is_watching+0x12/0xc0 [ 270.316980][ T8630] ? __pfx___mmap_region+0x10/0x10 [ 270.317030][ T8630] ? finish_task_switch.isra.0+0x221/0xc10 [ 270.317068][ T8630] ? __schedule+0x1186/0x5de0 [ 270.317097][ T8630] ? kvm_sched_clock_read+0x11/0x20 [ 270.317127][ T8630] ? sched_clock+0x38/0x60 [ 270.317228][ T8630] ? trace_cap_capable+0x18d/0x200 [ 270.317261][ T8630] ? cap_capable+0xb3/0x250 [ 270.317294][ T8630] mmap_region+0x1ab/0x3f0 [ 270.317336][ T8630] do_mmap+0xd8e/0x11b0 [ 270.317385][ T8630] ? __pfx_do_mmap+0x10/0x10 [ 270.317436][ T8630] ? __pfx_down_write_killable+0x10/0x10 [ 270.317486][ T8630] vm_mmap_pgoff+0x281/0x450 [ 270.317537][ T8630] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 270.317590][ T8630] ? __x64_sys_futex+0x1e0/0x4c0 [ 270.317620][ T8630] ? __x64_sys_futex+0x1e9/0x4c0 [ 270.317657][ T8630] ksys_mmap_pgoff+0x7d/0x5c0 [ 270.317699][ T8630] ? rcu_is_watching+0x12/0xc0 [ 270.317730][ T8630] __x64_sys_mmap+0x125/0x190 [ 270.317763][ T8630] do_syscall_64+0xcd/0x230 [ 270.317803][ T8630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.317832][ T8630] RIP: 0033:0x7fdea058e969 [ 270.317856][ T8630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.317886][ T8630] RSP: 002b:00007fdea13a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 270.317915][ T8630] RAX: ffffffffffffffda RBX: 00007fdea07b6160 RCX: 00007fdea058e969 [ 270.317935][ T8630] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 270.317953][ T8630] RBP: 00007fdea0610ab1 R08: 0000000000000002 R09: 0000000000008000 [ 270.317972][ T8630] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 270.317991][ T8630] R13: 0000000000000000 R14: 00007fdea07b6160 R15: 00007ffcf51c93a8 [ 270.318030][ T8630] [ 270.575153][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.607667][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.609'. [ 271.044974][ T5849] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 271.936641][ T5849] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 271.936683][ T5849] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 271.951504][ T5849] Bluetooth: hci1: Dropping invalid advertising data [ 271.958860][ T5849] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 274.322090][ T8705] netlink: 338 bytes leftover after parsing attributes in process `syz.1.628'. [ 274.384427][ T8695] could not allocate digest TFM handle [ 274.983577][ T8718] netlink: 338 bytes leftover after parsing attributes in process `syz.1.637'. [ 274.992094][ T8712] could not allocate digest TFM handle [ 275.554989][ T8730] netlink: 338 bytes leftover after parsing attributes in process `syz.1.631'. [ 275.746864][ T8725] could not allocate digest TFM handle [ 276.016342][ T8737] CIFS mount error: No usable UNC path provided in device string! [ 276.016342][ T8737] [ 276.070314][ T8737] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 276.167715][ T8736] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[8736] [ 277.298286][ T8759] bond0: option all_slaves_active: invalid value () [ 278.782656][ T8795] ICMPv6: process `syz.2.644' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 279.124238][ T8803] could not allocate digest TFM handle [ 279.160018][ T8803] netlink: 338 bytes leftover after parsing attributes in process `syz.3.645'. [ 279.166054][ T8804] could not allocate digest TFM handle [ 279.191001][ T8813] netlink: 338 bytes leftover after parsing attributes in process `syz.1.646'. [ 280.043886][ T8831] CIFS mount error: No usable UNC path provided in device string! [ 280.043886][ T8831] [ 280.320655][ T8831] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 280.351983][ T8820] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[8820] [ 281.024319][ T8851] FAULT_INJECTION: forcing a failure. [ 281.024319][ T8851] name failslab, interval 1, probability 0, space 0, times 0 [ 281.094643][ T8851] CPU: 1 UID: 0 PID: 8851 Comm: syz.0.652 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 281.094685][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 281.094704][ T8851] Call Trace: [ 281.094713][ T8851] [ 281.094725][ T8851] dump_stack_lvl+0x16c/0x1f0 [ 281.094766][ T8851] should_fail_ex+0x512/0x640 [ 281.094808][ T8851] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 281.094846][ T8851] should_failslab+0xc2/0x120 [ 281.094882][ T8851] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 281.094915][ T8851] ? security_file_alloc+0x34/0x2b0 [ 281.094959][ T8851] security_file_alloc+0x34/0x2b0 [ 281.094998][ T8851] init_file+0x93/0x4c0 [ 281.095032][ T8851] alloc_empty_file+0x73/0x1e0 [ 281.095069][ T8851] path_openat+0xe0/0x2d40 [ 281.095094][ T8851] ? __x64_sys_open+0x153/0x1e0 [ 281.095130][ T8851] ? do_syscall_64+0xcd/0x230 [ 281.095163][ T8851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.095206][ T8851] ? __pfx_path_openat+0x10/0x10 [ 281.095237][ T8851] ? __lock_acquire+0xaa4/0x1ba0 [ 281.095279][ T8851] do_filp_open+0x20b/0x470 [ 281.095308][ T8851] ? __pfx_do_filp_open+0x10/0x10 [ 281.095361][ T8851] ? _raw_spin_unlock+0x28/0x50 [ 281.095391][ T8851] ? alloc_fd+0x471/0x7d0 [ 281.095446][ T8851] do_sys_openat2+0x11b/0x1d0 [ 281.095488][ T8851] ? __pfx_do_sys_openat2+0x10/0x10 [ 281.095543][ T8851] __x64_sys_open+0x153/0x1e0 [ 281.095581][ T8851] ? __pfx___x64_sys_open+0x10/0x10 [ 281.095628][ T8851] ? rcu_is_watching+0x12/0xc0 [ 281.095658][ T8851] do_syscall_64+0xcd/0x230 [ 281.095697][ T8851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.095725][ T8851] RIP: 0033:0x7f5f2198e969 [ 281.095748][ T8851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.095776][ T8851] RSP: 002b:00007f5f227ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 281.095804][ T8851] RAX: ffffffffffffffda RBX: 00007f5f21bb6160 RCX: 00007f5f2198e969 [ 281.095824][ T8851] RDX: 0000000000000154 RSI: 0000000000022240 RDI: 0000200000000800 [ 281.095842][ T8851] RBP: 00007f5f21a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 281.095861][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.095879][ T8851] R13: 0000000000000000 R14: 00007f5f21bb6160 R15: 00007ffd13c1e368 [ 281.095917][ T8851] [ 281.734115][ T8883] netlink: 338 bytes leftover after parsing attributes in process `syz.3.658'. [ 281.743673][ T8872] can: request_module (can-proto-3) failed. [ 281.889830][ T8880] could not allocate digest TFM handle [ 282.920246][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.663'. [ 283.533028][ T8910] CIFS mount error: No usable UNC path provided in device string! [ 283.533028][ T8910] [ 283.594296][ T8910] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 283.723654][ T8903] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[8903] [ 283.948856][ T8917] netlink: 44 bytes leftover after parsing attributes in process `syz.2.664'. [ 285.465968][ T8950] random: crng reseeded on system resumption [ 286.788581][ T8973] Invalid ELF header magic: != ELF [ 287.676364][ T9001] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(2490376.3.0), cmd(3) [ 290.197690][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 291.074703][ T9083] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 291.127822][ T9093] Device name cannot be null; rc = [-22] [ 291.157074][ T9090] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 291.215149][ T9090] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 291.277139][ T9090] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.284194][ T9090] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 291.347688][ T9090] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 291.364218][ T9090] Bluetooth: hci3: Opcode 0x0406 failed: -4 syzkaller syzkaller login: [ 291.890078][ T9098] could not allocate digest TFM handle [ 293.176658][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 293.256571][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 293.346540][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 293.416524][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 294.198081][ T9133] netlink: 342 bytes leftover after parsing attributes in process `syz.0.704'. [ 294.247082][ T9133] netlink: 342 bytes leftover after parsing attributes in process `syz.0.704'. [ 294.303300][ T30] audit: type=1800 audit(4294967331.920:5): pid=9134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.704" name="lu_gp_id" dev="configfs" ino=21783 res=0 errno=0 [ 294.348732][ T9134] netlink: 294 bytes leftover after parsing attributes in process `syz.0.704'. [ 294.757880][ T9131] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[9131] [ 295.435711][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 295.496554][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 297.027881][ T9159] netlink: 338 bytes leftover after parsing attributes in process `syz.0.712'. [ 297.082001][ T9155] could not allocate digest TFM handle [ 297.090065][ T9153] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' with parent 'ieee80211' already present! [ 298.433075][ T9191] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[9191] [ 299.374772][ T9203] FAULT_INJECTION: forcing a failure. [ 299.374772][ T9203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.400118][ T9203] CPU: 0 UID: 0 PID: 9203 Comm: syz.0.721 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 299.400161][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 299.400190][ T9203] Call Trace: [ 299.400200][ T9203] [ 299.400211][ T9203] dump_stack_lvl+0x16c/0x1f0 [ 299.400249][ T9203] should_fail_ex+0x512/0x640 [ 299.400299][ T9203] _copy_to_user+0x32/0xd0 [ 299.400346][ T9203] simple_read_from_buffer+0xcb/0x170 [ 299.400391][ T9203] proc_fail_nth_read+0x197/0x270 [ 299.400432][ T9203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.400475][ T9203] ? rw_verify_area+0xcf/0x680 [ 299.400515][ T9203] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.400554][ T9203] vfs_read+0x1de/0xc70 [ 299.400586][ T9203] ? __pfx___mutex_lock+0x10/0x10 [ 299.400621][ T9203] ? __pfx_vfs_read+0x10/0x10 [ 299.400664][ T9203] ? __fget_files+0x20e/0x3c0 [ 299.400731][ T9203] ksys_read+0x12a/0x240 [ 299.400755][ T9203] ? __pfx_ksys_read+0x10/0x10 [ 299.400791][ T9203] do_syscall_64+0xcd/0x230 [ 299.400828][ T9203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.400855][ T9203] RIP: 0033:0x7f5f2198d37c [ 299.400877][ T9203] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 299.400902][ T9203] RSP: 002b:00007f5f227cc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.400928][ T9203] RAX: ffffffffffffffda RBX: 00007f5f21bb6080 RCX: 00007f5f2198d37c [ 299.400946][ T9203] RDX: 000000000000000f RSI: 00007f5f227cc0a0 RDI: 0000000000000003 [ 299.400963][ T9203] RBP: 00007f5f227cc090 R08: 0000000000000000 R09: 0000000000000000 [ 299.400979][ T9203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.400996][ T9203] R13: 0000000000000001 R14: 00007f5f21bb6080 R15: 00007ffd13c1e368 [ 299.401048][ T9203] [ 299.962189][ T9211] QAT: failed to copy from user cfg_data. [ 299.966658][ T9212] netlink: 338 bytes leftover after parsing attributes in process `syz.2.723'. [ 301.834818][ T9222] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' with parent 'ieee80211' already present! [ 302.174722][ T9238] netlink: 504 bytes leftover after parsing attributes in process `syz.1.729'. [ 302.185219][ T9238] netlink: 504 bytes leftover after parsing attributes in process `syz.1.729'. [ 302.245194][ T9233] zswap: compressor not available [ 302.392898][ T9242] netlink: 342 bytes leftover after parsing attributes in process `syz.1.731'. [ 302.408270][ T9242] netlink: 342 bytes leftover after parsing attributes in process `syz.1.731'. [ 302.423989][ T30] audit: type=1800 audit(4294967340.062:6): pid=9242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.731" name="lu_gp_id" dev="configfs" ino=22159 res=0 errno=0 [ 302.447764][ T9242] netlink: 242 bytes leftover after parsing attributes in process `syz.1.731'. [ 302.799728][ T9256] netlink: 338 bytes leftover after parsing attributes in process `syz.2.734'. [ 303.490123][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 303.813756][ T9279] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[9279] [ 304.420534][ T9283] QAT: Device 0 not found [ 305.113336][ T9303] netlink: 338 bytes leftover after parsing attributes in process `syz.1.745'. [ 306.027113][ T9319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.749'. [ 306.512139][ T9324] QAT: Device 2 not found [ 306.713576][ T9328] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[9328] [ 307.623294][ T9332] QAT: Device 0 not found [ 308.195820][ T56] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.205013][ T56] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.214193][ T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.223241][ T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.232507][ T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.771779][ T9348] nvme_fabrics: missing parameter 'transport=%s' [ 308.778545][ T9348] nvme_fabrics: missing parameter 'nqn=%s' [ 308.815136][ T9342] chnl_net:caif_netlink_parms(): no params data found [ 308.845224][ T9348] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 309.201893][ T9342] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.209148][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.233353][ T9342] bridge_slave_0: entered allmulticast mode [ 309.249508][ T9342] bridge_slave_0: entered promiscuous mode [ 309.270019][ T9342] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.277346][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.290135][ T9342] bridge_slave_1: entered allmulticast mode [ 309.298219][ T9342] bridge_slave_1: entered promiscuous mode [ 309.505189][ T9342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.533572][ T9342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.856463][ T9342] team0: Port device team_slave_0 added [ 309.876890][ T9342] team0: Port device team_slave_1 added [ 309.996355][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.009306][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.053048][ T9342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.105810][ T9342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.105831][ T9342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.105862][ T9342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.176070][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.289056][ T5849] Bluetooth: hci3: command tx timeout [ 310.502090][ T9342] hsr_slave_0: entered promiscuous mode [ 310.515602][ T9342] hsr_slave_1: entered promiscuous mode [ 310.530874][ T9342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.547133][ T9342] Cannot create hsr debugfs directory [ 311.186607][ T9342] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.301559][ T9342] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.526191][ T9342] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.553075][ T9401] QAT: failed to copy from user cfg_data. [ 311.771124][ T9342] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.125300][ T9342] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 312.168255][ T9342] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.211375][ T9342] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.256247][ T9342] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 312.377647][ T5849] Bluetooth: hci3: command tx timeout [ 312.416463][ T9342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.441093][ T9342] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.485937][ T8865] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.493167][ T8865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.549821][ T8875] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.557035][ T8875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.562647][ T9409] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 312.565305][ T9415] QAT: Device 2 not found [ 312.583029][ T9409] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 312.613988][ T9409] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 312.624576][ T9409] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 312.657185][ T9409] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 312.693794][ T9342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.720035][ T9409] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 312.918875][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.769'. syzkaller syzkaller login: [ 313.025914][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.771'. [ 313.174663][ T9342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.295700][ T9342] veth0_vlan: entered promiscuous mode [ 313.337928][ T9342] veth1_vlan: entered promiscuous mode [ 313.519749][ T9435] could not allocate digest TFM handle [ 313.574762][ T9435] netlink: 338 bytes leftover after parsing attributes in process `syz.3.772'. [ 313.586322][ T9342] veth0_macvtap: entered promiscuous mode [ 313.642743][ T9342] veth1_macvtap: entered promiscuous mode [ 313.964469][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.975973][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 314.047720][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.057979][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.070655][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.080974][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.091914][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.102116][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.114333][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.136253][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.366698][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.413744][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.427111][ T5834] ------------[ cut here ]------------ [ 314.432646][ T5834] ODEBUG: free active (active state 0) object: ffff888034ef5248 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 314.455806][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.474537][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.480995][ T5834] WARNING: CPU: 1 PID: 5834 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 314.485115][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.494083][ T5834] Modules linked in: [ 314.505127][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.508618][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 314.508667][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 314.519344][ T9342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.529437][ T5834] RIP: 0010:debug_print_object+0x1a2/0x2b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 314.539742][ T9342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.549838][ T5834] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 00 78 f4 8b 4c 89 e6 48 c7 c7 80 6c f4 8b e8 2f b8 a7 fc 90 <0f> 0b 90 90 58 83 05 e6 67 b2 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 314.549871][ T5834] RSP: 0018:ffffc90003f3f988 EFLAGS: 00010286 [ 314.592726][ T5834] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a8f78 [ 314.601443][ T5834] RDX: ffff88806c255a00 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 314.602103][ T9453] afs: Bad value for 'source' [ 314.610077][ T5834] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 314.616950][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 314.622377][ T5834] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bf47320 [ 314.636356][ T5834] R13: ffffffff8b8fc5c0 R14: ffffffff8a755a10 R15: ffffc90003f3fa88 [ 314.636381][ T9342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.644501][ T5834] FS: 0000000000000000(0000) GS:ffff888124aef000(0000) knlGS:0000000000000000 [ 314.659662][ T9342] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.660625][ T5834] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.669285][ T9342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.669326][ T9342] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.669363][ T9342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.675930][ T5834] CR2: 00007fdea05b6700 CR3: 0000000066492000 CR4: 00000000003526f0 [ 314.697002][ T5849] Bluetooth: hci3: command 0x0419 tx timeout [ 314.703124][ T5834] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 314.711212][ T56] Bluetooth: hci2: command 0x0c1a tx timeout [ 314.717060][ T5834] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 314.739242][ T5834] Call Trace: [ 314.742577][ T5834] [ 314.745541][ T5834] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 314.751121][ T5834] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 314.757065][ T5834] debug_check_no_obj_freed+0x4b7/0x600 [ 314.762667][ T5834] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 314.768912][ T5834] ? rcu_is_watching+0x12/0xc0 [ 314.773730][ T5834] ? kmem_cache_free+0x2d4/0x4d0 [ 314.779151][ T5834] kfree+0x291/0x4d0 [ 314.783378][ T5834] ? hci_release_dev+0x4d8/0x600 [ 314.788458][ T5834] hci_release_dev+0x4d8/0x600 [ 314.793279][ T5834] ? __pfx_hci_release_dev+0x10/0x10 [ 314.798708][ T5834] ? rcu_is_watching+0x12/0xc0 [ 314.803529][ T5834] ? kfree+0x252/0x4d0 [ 314.807715][ T5834] bt_host_release+0x6a/0xb0 [ 314.812360][ T5834] ? __pfx_bt_host_release+0x10/0x10 [ 314.817888][ T5834] device_release+0xa1/0x240 [ 314.822545][ T5834] kobject_put+0x1e4/0x5a0 [ 314.827062][ T5834] ? __pfx_vhci_release+0x10/0x10 [ 314.832159][ T5834] put_device+0x1f/0x30 [ 314.836372][ T5834] vhci_release+0x81/0xf0 [ 314.840808][ T5834] __fput+0x3ff/0xb70 [ 314.844846][ T5834] task_work_run+0x14d/0x240 [ 314.849654][ T5834] ? __pfx_task_work_run+0x10/0x10 [ 314.854823][ T5834] ? switch_task_namespaces+0xeb/0x100 [ 314.860408][ T5834] do_exit+0xafb/0x2c30 [ 314.864637][ T5834] ? do_raw_spin_lock+0x12c/0x2b0 [ 314.869799][ T5834] ? __pfx_do_exit+0x10/0x10 [ 314.874447][ T5834] ? rcu_is_watching+0x12/0xc0 [ 314.879316][ T5834] do_group_exit+0xd3/0x2a0 [ 314.884508][ T5834] __x64_sys_exit_group+0x3e/0x50 [ 314.889975][ T5834] x64_sys_call+0x1530/0x1730 [ 314.894708][ T5834] do_syscall_64+0xcd/0x230 [ 314.899394][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.905343][ T5834] RIP: 0033:0x7f954498e969 [ 314.909906][ T5834] Code: Unable to access opcode bytes at 0x7f954498e93f. [ 314.916997][ T5834] RSP: 002b:00007fff545b3698 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 314.925456][ T5834] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f954498e969 [ 314.933570][ T5834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 314.941627][ T5834] RBP: 00007f9544a12287 R08: 00007fff545b1436 R09: 00000000000927c0 [ 314.949698][ T5834] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 314.957745][ T5834] R13: 00000000000927c0 R14: 000000000004cb6c R15: 00007fff545b3850 [ 314.965799][ T5834] [ 314.968972][ T5834] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 314.976277][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 314.986711][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 314.996793][ T5834] Call Trace: [ 315.000088][ T5834] [ 315.003031][ T5834] dump_stack_lvl+0x3d/0x1f0 [ 315.007665][ T5834] panic+0x71c/0x800 [ 315.011581][ T5834] ? __pfx_panic+0x10/0x10 [ 315.016015][ T5834] ? show_trace_log_lvl+0x29b/0x3e0 [ 315.021241][ T5834] ? check_panic_on_warn+0x1f/0xb0 [ 315.026406][ T5834] ? debug_print_object+0x1a2/0x2b0 [ 315.031633][ T5834] check_panic_on_warn+0xab/0xb0 [ 315.036594][ T5834] __warn+0xf6/0x3c0 [ 315.040512][ T5834] ? debug_print_object+0x1a2/0x2b0 [ 315.045745][ T5834] report_bug+0x3c3/0x580 [ 315.050092][ T5834] ? debug_print_object+0x1a2/0x2b0 [ 315.055335][ T5834] handle_bug+0x184/0x210 [ 315.059699][ T5834] exc_invalid_op+0x17/0x50 [ 315.064238][ T5834] asm_exc_invalid_op+0x1a/0x20 [ 315.069098][ T5834] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 315.074940][ T5834] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 41 56 48 8b 14 dd 00 78 f4 8b 4c 89 e6 48 c7 c7 80 6c f4 8b e8 2f b8 a7 fc 90 <0f> 0b 90 90 58 83 05 e6 67 b2 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 315.094570][ T5834] RSP: 0018:ffffc90003f3f988 EFLAGS: 00010286 [ 315.100654][ T5834] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff817a8f78 [ 315.108630][ T5834] RDX: ffff88806c255a00 RSI: ffffffff817a8f85 RDI: 0000000000000001 [ 315.116607][ T5834] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 315.124583][ T5834] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8bf47320 [ 315.132559][ T5834] R13: ffffffff8b8fc5c0 R14: ffffffff8a755a10 R15: ffffc90003f3fa88 [ 315.140553][ T5834] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 315.146044][ T5834] ? __warn_printk+0x198/0x350 [ 315.150832][ T5834] ? __warn_printk+0x1a5/0x350 [ 315.155625][ T5834] ? debug_print_object+0x1a1/0x2b0 [ 315.160857][ T5834] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 315.166333][ T5834] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 315.172162][ T5834] debug_check_no_obj_freed+0x4b7/0x600 [ 315.177733][ T5834] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 315.183821][ T5834] ? rcu_is_watching+0x12/0xc0 [ 315.188617][ T5834] ? kmem_cache_free+0x2d4/0x4d0 [ 315.193583][ T5834] kfree+0x291/0x4d0 [ 315.197505][ T5834] ? hci_release_dev+0x4d8/0x600 [ 315.202465][ T5834] hci_release_dev+0x4d8/0x600 [ 315.207263][ T5834] ? __pfx_hci_release_dev+0x10/0x10 [ 315.212568][ T5834] ? rcu_is_watching+0x12/0xc0 [ 315.217374][ T5834] ? kfree+0x252/0x4d0 [ 315.221485][ T5834] bt_host_release+0x6a/0xb0 [ 315.226098][ T5834] ? __pfx_bt_host_release+0x10/0x10 [ 315.231410][ T5834] device_release+0xa1/0x240 [ 315.236028][ T5834] kobject_put+0x1e4/0x5a0 [ 315.240475][ T5834] ? __pfx_vhci_release+0x10/0x10 [ 315.245519][ T5834] put_device+0x1f/0x30 [ 315.249696][ T5834] vhci_release+0x81/0xf0 [ 315.254046][ T5834] __fput+0x3ff/0xb70 [ 315.258054][ T5834] task_work_run+0x14d/0x240 [ 315.262670][ T5834] ? __pfx_task_work_run+0x10/0x10 [ 315.267815][ T5834] ? switch_task_namespaces+0xeb/0x100 [ 315.273309][ T5834] do_exit+0xafb/0x2c30 [ 315.277502][ T5834] ? do_raw_spin_lock+0x12c/0x2b0 [ 315.282554][ T5834] ? __pfx_do_exit+0x10/0x10 [ 315.287177][ T5834] ? rcu_is_watching+0x12/0xc0 [ 315.291951][ T5834] do_group_exit+0xd3/0x2a0 [ 315.296475][ T5834] __x64_sys_exit_group+0x3e/0x50 [ 315.301520][ T5834] x64_sys_call+0x1530/0x1730 [ 315.306227][ T5834] do_syscall_64+0xcd/0x230 [ 315.310763][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.316669][ T5834] RIP: 0033:0x7f954498e969 [ 315.321096][ T5834] Code: Unable to access opcode bytes at 0x7f954498e93f. [ 315.328116][ T5834] RSP: 002b:00007fff545b3698 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 315.336580][ T5834] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f954498e969 [ 315.344573][ T5834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 315.352579][ T5834] RBP: 00007f9544a12287 R08: 00007fff545b1436 R09: 00000000000927c0 [ 315.360568][ T5834] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 315.368555][ T5834] R13: 00000000000927c0 R14: 000000000004cb6c R15: 00007fff545b3850 [ 315.376556][ T5834] [ 315.379927][ T5834] Kernel Offset: disabled [ 315.384273][ T5834] Rebooting in 86400 seconds..